diff --git a/.gitea/workflows/deploy-dev.yml b/.gitea/workflows/deploy-dev.yml
index 53a3f20..1b2796f 100644
--- a/.gitea/workflows/deploy-dev.yml
+++ b/.gitea/workflows/deploy-dev.yml
@@ -16,10 +16,13 @@ jobs:
     steps:
       - name: Checkout repository
         run: |
-          cd /volume1/repos/nas-tools
-          git fetch origin dev
+          # Clone into a temp directory accessible by runner
+          WORK_DIR="/tmp/nas-tools-deploy-$$"
+          rm -rf "$WORK_DIR"
+          git clone http://gitea:3000/jimmy/nas-tools.git "$WORK_DIR"
+          cd "$WORK_DIR"
           git checkout ${{ github.sha }}
-          git clean -fd
+          echo "WORK_DIR=$WORK_DIR" >> $GITHUB_ENV
       - name: Warm mirror cache for base images
         run: |
           set -u
@@ -52,13 +55,13 @@ jobs:
 
       - name: Build dev image
         run: |
-          cd /volume1/repos/nas-tools
+          cd $WORK_DIR
           export DOCKER_API_VERSION=1.43
           DOCKER_BUILDKIT=0 docker build --cache-from nas-dashboard-dev:latest -t nas-dashboard-dev:latest dashboard/
       - name: Sync runtime compose file
         run: |
           mkdir -p /volume1/docker/nas-dashboard
-          cp /volume1/repos/nas-tools/dashboard/docker-compose.dev.yml /volume1/docker/nas-dashboard/docker-compose.dev.yml
+          cp $WORK_DIR/dashboard/docker-compose.dev.yml /volume1/docker/nas-dashboard/docker-compose.dev.yml
       - name: Deploy dev
         run: |
           set -euo pipefail
@@ -81,3 +84,7 @@ jobs:
 
           # Connect to gitea_gitea network for database access (OPC_DB)
           docker network connect gitea_gitea nas-dashboard-dev || true
+      - name: Cleanup
+        if: always()
+        run: |
+          rm -rf $WORK_DIR