diff --git a/.gitea/workflows/build.yaml b/.gitea/workflows/build.yaml
index d0eeb32..155b55b 100644
--- a/.gitea/workflows/build.yaml
+++ b/.gitea/workflows/build.yaml
@@ -43,7 +43,7 @@ jobs:
             curl -fsSL https://github.com/jqlang/jq/releases/latest/download/jq-linux-arm64 -o "$HOME/.local/bin/jq"
             chmod +x "$HOME/.local/bin/jq"
           fi
-          make --version | head -1
+          make --version
           crane version || true
 
       - name: Set up Docker Buildx
@@ -82,7 +82,7 @@ jobs:
       - name: Compress disk image
         run: |
           # The imager outputs to checkouts/talos/_out/
-          DISK_IMAGE=$(find checkouts/talos/_out -name 'metal-arm64*.raw*' | head -1)
+          DISK_IMAGE=$(find checkouts/talos/_out -name 'metal-arm64*.raw*' -print -quit)
           if [ -z "$DISK_IMAGE" ]; then
             echo "Error: disk image not found in checkouts/talos/_out/"
             find checkouts/talos/_out -type f
diff --git a/scripts/auto-update.sh b/scripts/auto-update.sh
index 8848e4b..a180ea5 100755
--- a/scripts/auto-update.sh
+++ b/scripts/auto-update.sh
@@ -109,9 +109,9 @@ NEW_TAG="${TAG_PREFIX}-${NEXT_BUILD}"
 # ── Update README badges and examples ───────────────────────────────
 README="README.md"
 if [ -f "$README" ]; then
-  OLD_TALOS=$(sed -n 's/.*talos-v\([0-9]*\.[0-9]*\.[0-9]*\).*/\1/p' "$README" | head -1)
-  OLD_KERNEL=$(sed -n 's/.*kernel-\([0-9]*\.[0-9]*\.[0-9]*\).*/\1/p' "$README" | head -1)
-  OLD_TAG=$(sed -n 's/.*\(v[0-9]*\.[0-9]*\.[0-9]*-k[0-9]*\.[0-9]*\.[0-9]*-[0-9]*\).*/\1/p' "$README" | head -1)
+  OLD_TALOS=$(sed -n 's/.*talos-v\([0-9]*\.[0-9]*\.[0-9]*\).*/\1/p' "$README" | awk 'NR==1')
+  OLD_KERNEL=$(sed -n 's/.*kernel-\([0-9]*\.[0-9]*\.[0-9]*\).*/\1/p' "$README" | awk 'NR==1')
+  OLD_TAG=$(sed -n 's/.*\(v[0-9]*\.[0-9]*\.[0-9]*-k[0-9]*\.[0-9]*\.[0-9]*-[0-9]*\).*/\1/p' "$README" | awk 'NR==1')
 
   echo "Updating README: talos v${OLD_TALOS} → v${TALOS_VER}, kernel ${OLD_KERNEL} → ${KERNEL_VER}, tag ${OLD_TAG} → ${NEW_TAG}" >&2