diff --git a/action.yml b/action.yml
index d3252da..d0280bc 100644
--- a/action.yml
+++ b/action.yml
@@ -35,9 +35,10 @@ runs:
       shell: bash
       env:
         TZ: ${{ inputs.tz }}
+        DEBIAN_FRONTEND: noninteractive
+        PHP_VER: ${{ inputs.php-version }}
       run: |
         set -euo pipefail
-        # scripts/ lives in the repo; when used as a local action, this path is correct
         ./scripts/setup-php-sources.sh
 
     - name: Install PHP build-deps
@@ -72,7 +73,7 @@ runs:
         SQLCIPHER_VERSION: ${{ inputs.sqlcipher-version }}
       run: |
         set -euo pipefail
-        cd "$GITHUB_WORKSPACE"
+        cd "$FORGEJO_WORKSPACE"
 
         # match Dockerfile layout in /work/src
         git clone --branch "v${SQLCIPHER_VERSION}" --depth 1 \
@@ -92,7 +93,7 @@ runs:
         SQLCIPHER_VERSION: ${{ inputs.sqlcipher-version }}
       run: |
         set -euo pipefail
-        cd "$GITHUB_WORKSPACE"
+        cd "$FORGEJO_WORKSPACE"
 
         umask 022
         ./scripts/render-debian-files.sh
@@ -106,7 +107,7 @@ runs:
       shell: bash
       run: |
         set -euo pipefail
-        cd "$GITHUB_WORKSPACE"
+        cd "$FORGEJO_WORKSPACE"
 
         pkg=$(ls -1 ../*.deb | grep -v dbgsym | head -n1)
         echo "Testing package: $pkg"
@@ -116,7 +117,7 @@ runs:
       shell: bash
       run: |
         set -euo pipefail
-        cd "$GITHUB_WORKSPACE"
+        cd "$FORGEJO_WORKSPACE"
 
         mkdir -p dist
         cp -a ../*.deb ../*.buildinfo ../*.changes dist/ || true
diff --git a/actions.yml b/actions.yml
deleted file mode 100644
index d3252da..0000000
--- a/actions.yml
+++ /dev/null
@@ -1,122 +0,0 @@
-name: Build php-pdo-sqlcipher Debian package
-description: Build and test php-pdo-sqlcipher .deb using dpkg-buildpackage + autopkgtest on Debian
-
-inputs:
-  php-version:
-    description: PHP version to build against (e.g. 8.2)
-    default: '8.2'
-  sqlcipher-version:
-    description: SQLCipher tag (without the leading v)
-    default: '4.12.0'
-  tz:
-    description: Timezone
-    default: 'UTC'
-
-runs:
-  using: composite
-  steps:
-    - name: Set up APT and build dependencies
-      shell: bash
-      env:
-        DEBIAN_FRONTEND: noninteractive
-        TZ: ${{ inputs.tz }}
-      run: |
-        set -euo pipefail
-
-        apt-get update
-        apt-get install -y --no-install-recommends \
-          apt-transport-https apt-utils autoconf autopkgtest build-essential \
-          ca-certificates curl dpkg-dev devscripts debhelper dh-php pkg-php-tools \
-          git gnupg pkg-config \
-          libicu-dev libreadline-dev libssl-dev libsqlite3-dev libtool \
-          lintian lsb-release tcl-dev
-
-    - name: Configure PHP APT sources
-      shell: bash
-      env:
-        TZ: ${{ inputs.tz }}
-      run: |
-        set -euo pipefail
-        # scripts/ lives in the repo; when used as a local action, this path is correct
-        ./scripts/setup-php-sources.sh
-
-    - name: Install PHP build-deps
-      shell: bash
-      env:
-        DEBIAN_FRONTEND: noninteractive
-        PHP_VER: ${{ inputs.php-version }}
-      run: |
-        set -euo pipefail
-        apt-get update
-        apt-get build-dep -y "php${PHP_VER}"
-
-    - name: Ensure PHP CLI with docs for autopkgtest
-      shell: bash
-      env:
-        DEBIAN_FRONTEND: noninteractive
-        PHP_VER: ${{ inputs.php-version }}
-      run: |
-        set -euo pipefail
-
-        # Make sure docs are not excluded, autopkgtest needs examples
-        rm -f /etc/dpkg/dpkg.cfg.d/docker /etc/dpkg/dpkg.cfg.d/excludes || true
-        printf 'path-include=/usr/share/doc/*\n' > /etc/dpkg/dpkg.cfg.d/01-include-docs
-
-        apt-get update
-        apt-get install -y --no-install-recommends "php${PHP_VER}-cli"
-
-    - name: Fetch upstream sources (sqlcipher, pdo_sqlcipher, PHP)
-      shell: bash
-      env:
-        PHP_VER: ${{ inputs.php-version }}
-        SQLCIPHER_VERSION: ${{ inputs.sqlcipher-version }}
-      run: |
-        set -euo pipefail
-        cd "$GITHUB_WORKSPACE"
-
-        # match Dockerfile layout in /work/src
-        git clone --branch "v${SQLCIPHER_VERSION}" --depth 1 \
-          https://github.com/sqlcipher/sqlcipher.git build-sqlcipher
-
-        git clone --branch main --depth 1 \
-          https://git.mig5.net/mig5/pdo_sqlcipher.git
-
-        mkdir -p php-src
-        cd php-src
-        apt-get -y source "php${PHP_VER}"
-
-    - name: Render Debian files and build package
-      shell: bash
-      env:
-        PHP_VER: ${{ inputs.php-version }}
-        SQLCIPHER_VERSION: ${{ inputs.sqlcipher-version }}
-      run: |
-        set -euo pipefail
-        cd "$GITHUB_WORKSPACE"
-
-        umask 022
-        ./scripts/render-debian-files.sh
-
-        dpkg-buildpackage -us -uc -b -rfakeroot
-
-        . /etc/os-release
-        lintian -i -E --pedantic --profile "${ID}" --fail-on error ../*.changes
-
-    - name: Run autopkgtest on built package
-      shell: bash
-      run: |
-        set -euo pipefail
-        cd "$GITHUB_WORKSPACE"
-
-        pkg=$(ls -1 ../*.deb | grep -v dbgsym | head -n1)
-        echo "Testing package: $pkg"
-        autopkgtest "$pkg" -- null
-
-    - name: Collect artifacts
-      shell: bash
-      run: |
-        set -euo pipefail
-        cd "$GITHUB_WORKSPACE"
-
-        mkdir -p dist
-        cp -a ../*.deb ../*.buildinfo ../*.changes dist/ || true