diff --git a/.gitea/workflows/refresh-image-locks.yml b/.gitea/workflows/refresh-image-locks.yml
index c40c85e5..16d0ce0d 100644
--- a/.gitea/workflows/refresh-image-locks.yml
+++ b/.gitea/workflows/refresh-image-locks.yml
@@ -37,8 +37,11 @@ jobs:
 
       - name: Compile gateway Python lock
         run: |
-          python3 -m pip install pip==25.2 pip-tools==7.5.1
-          python3 -m piptools compile \
+          python3 -m venv /tmp/image-lock-tools
+          /tmp/image-lock-tools/bin/python -m pip install \
+            pip==25.2 \
+            pip-tools==7.5.1
+          /tmp/image-lock-tools/bin/python -m piptools compile \
             --generate-hashes \
             --output-file requirements.gateway.lock \
             requirements.gateway.in