diff --git a/.github/workflows/build-iso.yml b/.github/workflows/build-iso.yml
index f5e8d20..9f11ea6 100644
--- a/.github/workflows/build-iso.yml
+++ b/.github/workflows/build-iso.yml
@@ -50,9 +50,9 @@ jobs:
         # SHA pinning in a follow-up sweep.
         uses: addnab/docker-run-action@v3
         with:
-          # Pinned to digest from `skopeo inspect --raw` on 2026-05-06.
-          # Refresh by re-running skopeo against fedora:43 and bumping.
-          image: registry.fedoraproject.org/fedora:43@sha256:72e874e771b953c6357c7a5823c6fc1e3e3253b90121e795febe01380e32269b
+          # Pinned to amd64 digest from `skopeo inspect --raw` on 2026-05-06.
+          # Refresh by re-running skopeo against fedora:43 and picking the amd64 entry.
+          image: registry.fedoraproject.org/fedora:43@sha256:3207ed0f3765f81675f6ce2aa04f52a6cdbb2dddddc5ab9be6e0b0441ece136d
           options: |
             --privileged
             --userns=host