diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index a6e219d..5a1db4c 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -44,10 +44,12 @@ jobs:
           export PATH="$PATH:$(go env GOPATH)/bin"
           make proto-gen
 
+      # Installed via `go install` (module proxy + sumdb verification): the
+      # official install.sh tarball download hit checksum mismatches on this
+      # runner.
       - name: Run golangci-lint
         run: |
-          curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | \
-            sh -s -- -b "$(go env GOPATH)/bin" v2.12.2
+          go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.12.2
           "$(go env GOPATH)/bin/golangci-lint" run ./...
 
   test: