diff --git a/.forgejo/workflows/setup-tools.sh b/.forgejo/workflows/setup-tools.sh
index 0daf5e3..0a3154c 100755
--- a/.forgejo/workflows/setup-tools.sh
+++ b/.forgejo/workflows/setup-tools.sh
@@ -7,6 +7,7 @@ JUST_SHA256SUM="dc3f958aaf8c6506dd90426e9b03f86dd15e74a6467ee0e54929f750af3d9e49
 CARGO_LLVM_COV_VERSION="0.6.21"
 CARGO_LLVM_COV_SHA256SUM="57f491aedf7cdb261538ceb49cbb1ee9d27df7ca205a5e1a009caaf5cb911afb"
 CARGO_AUDIT_VERSION="0.22.1"
+CARGO_AUDIT_TAG="cargo-audit%2Fv$CARGO_AUDIT_VERSION"
 CARGO_AUDIT_SHA256SUM="1890badd5f15831a9af4b074399fcd21e6f7c0fe42c84e9254cdffc9f813765c"
 
 TRIPLE="x86_64-unknown-linux-gnu"
@@ -36,7 +37,6 @@ fetch taiki-e/cargo-llvm-cov "v$CARGO_LLVM_COV_VERSION" \
     "cargo-llvm-cov-$TRIPLE.tar.gz" \
     "$CARGO_LLVM_COV_SHA256SUM" cargo-llvm-cov
 
-fetch rustsec/rustsec "v$CARGO_AUDIT_VERSION" \
+fetch rustsec/rustsec "$CARGO_AUDIT_TAG" \
     "cargo-audit-$TRIPLE-v$CARGO_AUDIT_VERSION.tgz" \
     "$CARGO_AUDIT_SHA256SUM" cargo-audit
-