diff --git a/.forgejo/workflows/docker-build.yml b/.forgejo/workflows/docker-build.yml
index e012b3e..0bedcd5 100644
--- a/.forgejo/workflows/docker-build.yml
+++ b/.forgejo/workflows/docker-build.yml
@@ -10,7 +10,9 @@ defaults:
 
 jobs:
   build-and-push:
-    runs-on: docker
+    # Runner offers ubuntu-latest; the label only selects the runner. The job
+    # overrides the image below with docker:cli and mounts the host socket.
+    runs-on: ubuntu-latest
     # Run the job in a Docker-CLI container and mount the host's Docker socket
     # (OrbStack) so `docker build` talks to the host daemon. Requires the runner
     # config to allow this volume — see valid_volumes note.