diff --git a/ci-flatpak-builder.yml b/ci-flatpak-builder.yml
index acea9848711f9eb6a66a966f0ceb8a2e559c490c..6171de0062588a78586d7ef797deb71c27e3cdf6 100644
--- a/ci-flatpak-builder.yml
+++ b/ci-flatpak-builder.yml
@@ -22,7 +22,9 @@ build-app:
     - flatpak --if-not-exists --user remote-add --no-gpg-verify mildenhall https://images.apertis.org/public/flatpak/mildenhall
     - flatpak install -y org.apertis.mildenhall.Platform org.apertis.mildenhall.Sdk
   script:
-    - flatpak-builder --default-branch=${APERTIS_RELEASE} --force-clean build-dir flatpak-recipe.yaml
+    - REPODIR=$(mktemp -d repo-XXXXXX)
+    - chmod 755 ${REPODIR}
+    - flatpak-builder --repo=${REPODIR} --default-branch=${APERTIS_RELEASE} --force-clean build-dir flatpak-recipe.yaml
     - |
       case "$CI_COMMIT_REF_NAME" in
         apertis/*)
@@ -33,7 +35,7 @@ build-app:
           ;;
       esac
     - ssh -oStrictHostKeyChecking=no -i "$ARCHIVE_SECRET_FILE" "$upload_host" mkdir -p "$UPLOAD_ROOT"
-    - rsync -e "ssh -oStrictHostKeyChecking=no -i $ARCHIVE_SECRET_FILE" -aP ~/.cache/flatdeb/ostree-repo/. "$upload_host:$UPLOAD_ROOT"
+    - rsync -e "ssh -oStrictHostKeyChecking=no -i $ARCHIVE_SECRET_FILE" -aP ${REPODIR}/. "$upload_host:$UPLOAD_ROOT"
     - ssh -oStrictHostKeyChecking=no -i "$ARCHIVE_SECRET_FILE" "$upload_host" flatpak build-update-repo "$UPLOAD_ROOT"
   only:
     refs: