diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
index 2035180..0b1d540 100644
--- a/.forgejo/workflows/ci.yml
+++ b/.forgejo/workflows/ci.yml
@@ -150,7 +150,7 @@ jobs:
           ln -sf /root/.local/bin/uv /usr/local/bin/uv
           ln -sf /root/.local/bin/uvx /usr/local/bin/uvx
           uv python install 3.11
-          uv venv --python 3.11 .venv
-          uv pip install --python .venv/bin/python bandit
+          uv venv --python 3.11 /tmp/bandit-venv
+          uv pip install --python /tmp/bandit-venv/bin/python bandit
       - name: Bandit (high+medium severity)
-        run: source .venv/bin/activate && bandit -r . -x tests/,.venv,__pycache__ -ll
+        run: source /tmp/bandit-venv/bin/activate && bandit -r . -x tests/,.venv,__pycache__ -ll
diff --git a/PYEOF b/PYEOF
new file mode 100644
index 0000000..e69de29