diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 884f43e..dc89f8e 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -13,32 +13,14 @@ jobs:
       image: node:20-bookworm-slim
 
     steps:
-      - name: Install base tools (git + certs)
+      - name: Install git (needed by checkout)
         run: |
-          set -e
           apt-get update
           apt-get install -y --no-install-recommends git ca-certificates
-          rm -rf /var/lib/apt/lists/*
           git --version
 
-      - name: Checkout (from Gitea, no external actions)
-        env:
-          SERVER: ${{ github.server_url }}
-          REPO: ${{ github.repository }}
-          SHA: ${{ github.sha }}
-          TOKEN: ${{ secrets.CI_TOKEN }}
-        run: |
-          set -euo pipefail
-
-          if [ -n "${TOKEN:-}" ]; then
-            AUTH="$(printf "oauth2:%s" "$TOKEN" | base64 | tr -d '\n')"
-            git -c http.extraHeader="AUTHORIZATION: basic $AUTH" clone "$SERVER/$REPO.git" .
-          else
-            echo "ℹ️ CI_TOKEN absent → clone sans auth (repo public ou accès runner déjà OK)."
-            git clone "$SERVER/$REPO.git" .
-          fi
-
-          git checkout "$SHA"
+      - name: Checkout
+        uses: actions/checkout@v4
 
       - name: Install deps
         run: npm ci