diff --git a/.gitea/workflows/backend-quality-gate.yml b/.gitea/workflows/backend-quality-gate.yml
index 280ad4df..192dee59 100644
--- a/.gitea/workflows/backend-quality-gate.yml
+++ b/.gitea/workflows/backend-quality-gate.yml
@@ -269,7 +269,7 @@ jobs:
             artifacts/staging-images/manifest.env "$GITEA_SHA" "$IMAGE_REPOSITORY" >/dev/null
 
       - name: Upload immutable staging image manifest
-        uses: https://gitea.com/actions/gitea-upload-artifact@v4
+        uses: https://git.copse.top/jesse/gitea-upload-artifact@81f940d004763f986ba3582c007fd842dd5cb0d7
         with:
           name: staging-image-manifest-${{ gitea.sha }}-${{ gitea.run_attempt }}
           path: artifacts/staging-images/manifest.env
diff --git a/frontend/tests/staging-backend-workflows.test.ts b/frontend/tests/staging-backend-workflows.test.ts
index 61b196cf..d4badead 100644
--- a/frontend/tests/staging-backend-workflows.test.ts
+++ b/frontend/tests/staging-backend-workflows.test.ts
@@ -201,7 +201,7 @@ test("Gitea quality gate validates before publishing an immutable ACR manifest",
   assert.match(workflow, /get\("os"\)=="linux"/);
   assert.match(workflow, /get\("architecture"\)=="amd64"/);
   assert.match(workflow, /node frontend\/scripts\/staging-image-manifest\.mjs/);
-  assert.match(workflow, /uses: https:\/\/gitea\.com\/actions\/gitea-upload-artifact@v4/);
+  assert.match(workflow, /uses: https:\/\/git\.copse\.top\/jesse\/gitea-upload-artifact@81f940d004763f986ba3582c007fd842dd5cb0d7/);
   assert.match(workflow, /name: staging-image-manifest-\$\{\{ gitea\.sha \}\}-\$\{\{ gitea\.run_attempt \}\}/);
   assertOrder(workflow, [
     "docker login",