diff --git a/.github/workflows/sync-rebuilds.yml b/.github/workflows/sync-rebuilds.yml
index 7a9d9c06..f57b0ac9 100644
--- a/.github/workflows/sync-rebuilds.yml
+++ b/.github/workflows/sync-rebuilds.yml
@@ -68,7 +68,7 @@ jobs:
             -v "$PWD/helpers:/workspace/helpers:ro" \
             -v "$PWD/pkgbuilds:/workspace/pkgbuilds" \
             -w /workspace \
-            archlinux:base-devel bash -lc '
+            ghcr.io/archlinux/archlinux:base-devel bash -lc '
               set -euo pipefail
 
               printf "Server = https://mirror.omarchy.org/\$repo/os/\$arch\n" > /etc/pacman.d/mirrorlist
diff --git a/.github/workflows/sync-upstream.yml b/.github/workflows/sync-upstream.yml
index 7bfb34a0..7213624d 100644
--- a/.github/workflows/sync-upstream.yml
+++ b/.github/workflows/sync-upstream.yml
@@ -55,7 +55,7 @@ jobs:
             -v "$PWD/helpers:/workspace/helpers:ro" \
             -v "$PWD/pkgbuilds:/workspace/pkgbuilds" \
             -w /workspace \
-            archlinux:base-devel bash -lc '
+            ghcr.io/archlinux/archlinux:base-devel bash -lc '
               set -euo pipefail
 
               pacman -Syu --noconfirm git jq python libarchive
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 929379f8..0cf82f1a 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -45,7 +45,7 @@ jobs:
           docker run --rm \
             -v "$PWD:/workspace:ro" \
             -w /workspace \
-            archlinux:base-devel bash -lc '
+            ghcr.io/archlinux/archlinux:base-devel bash -lc '
               set -euo pipefail
               pacman -Syu --noconfirm git jq python libarchive neovim tmux
               python tests/owe-package-restart.py
diff --git a/.github/workflows/track-branches.yml b/.github/workflows/track-branches.yml
index eb47f247..2894d36e 100644
--- a/.github/workflows/track-branches.yml
+++ b/.github/workflows/track-branches.yml
@@ -68,7 +68,7 @@ jobs:
             -v "$PWD/helpers:/workspace/helpers:ro" \
             -v "$PWD/pkgbuilds:/workspace/pkgbuilds" \
             -w /workspace \
-            archlinux:base-devel bash -lc '
+            ghcr.io/archlinux/archlinux:base-devel bash -lc '
               set -euo pipefail
 
               pacman -Syu --noconfirm git jq python libarchive
diff --git a/tests/build-isolation.Dockerfile b/tests/build-isolation.Dockerfile
index 94390016..9bc96338 100644
--- a/tests/build-isolation.Dockerfile
+++ b/tests/build-isolation.Dockerfile
@@ -1,6 +1,6 @@
 # Only the build runner is under test; source-free fixtures need no Omarchy
 # bootstrap, signing key, mirror, or production repository.
-FROM archlinux:base-devel
+FROM ghcr.io/archlinux/archlinux:base-devel
 RUN pacman -Syu --noconfirm git jq sudo && \
     useradd -m -u 1000 builder && \
     echo 'builder ALL=(ALL) NOPASSWD: ALL' > /etc/sudoers.d/builder && \