diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
index 482ad7f..d24ab05 100644
--- a/.forgejo/workflows/ci.yml
+++ b/.forgejo/workflows/ci.yml
@@ -41,9 +41,13 @@ jobs:
           bash -c '
         set -e
         
-        # Install curl first
-        echo "Installing curl..."
+        # Add Debian GPG keys FIRST - this must happen before any apt-get update
+        echo "Adding Debian GPG keys..."
         apt-get update
+        apt-get install -y debian-archive-keyring
+        
+        # Install curl
+        echo "Installing curl..."
         apt-get install -y curl
         
         # Try apt-cacher-ng first, fallback to Debian's automatic mirror selection
@@ -62,11 +66,6 @@ jobs:
           echo "Using httpredir.debian.org for automatic mirror selection"
         fi
         
-        # Add Debian GPG keys
-        echo "Adding Debian GPG keys..."
-        apt-get update
-        apt-get install -y debian-archive-keyring
-        
         # Update and install remaining dependencies
         apt-get update
         apt-get install -y \