diff --git a/.forgejo/workflows/identity-journeys.yaml b/.forgejo/workflows/identity-journeys.yaml
index bf23e4f..81e7a91 100644
--- a/.forgejo/workflows/identity-journeys.yaml
+++ b/.forgejo/workflows/identity-journeys.yaml
@@ -6,13 +6,15 @@ on:
   workflow_dispatch:
 jobs:
   provider:
-    runs-on: self-hosted
+    runs-on: ubuntu-latest
+    container:
+      image: python:3.12-slim@sha256:d764629ce0ddd8c71fd371e9901efb324a95789d2315a47db7e4d27e78f1b0e9
     steps:
       - name: Test the exact commit
         run: |
           set -eu
           mkdir -p identity-source
-          curl -fsSL "https://forgejo.coulomb.social/${GITHUB_REPOSITORY}/archive/${GITHUB_SHA}.tar.gz" -o identity-source.tar.gz
+          python -c 'import os, urllib.request; urllib.request.urlretrieve("https://forgejo.coulomb.social/" + os.environ["GITHUB_REPOSITORY"] + "/archive/" + os.environ["GITHUB_SHA"] + ".tar.gz", "identity-source.tar.gz")'
           tar xzf identity-source.tar.gz -C identity-source --strip-components=1
           cd identity-source
           PYTHONDONTWRITEBYTECODE=1 PYTHONPATH=identity-provisioner python3 -m unittest discover -s identity-provisioner/tests -v