diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2bbbd203..103f1044 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,5 +1,15 @@
 name: CI
 
+# Every "runTests.sh" call below passes "-b docker". The script prefers podman
+# whenever it is present and only falls back to docker, which is the right
+# default for it -- but GitHub hosted runners ship both, and since 2026-07-29
+# their podman/crun combination aborts the first container start of a job with
+# "OCI runtime error: crun: unknown version specified" (exit code 126). It is
+# intermittent, hits any job, and was traced to neither the runner image nor
+# the TYPO3 testing image changing. Selecting docker here avoids crun entirely
+# and leaves the script default and local runs untouched. Drop the flag once
+# GitHub stops producing the mismatch.
+
 on:
   push:
   pull_request:
@@ -21,18 +31,18 @@ jobs:
           ref: ${{ github.event_name == 'workflow_dispatch' && github.head_ref || '' }}
 
       - name: Composer install
-        run: Build/Scripts/runTests.sh -p ${{ matrix.php }} -s composerUpdate
+        run: Build/Scripts/runTests.sh -b docker -p ${{ matrix.php }} -s composerUpdate
 
       - name: CGL
         if: ${{ matrix.php <= '8.1' }}
-        run: Build/Scripts/runTests.sh -p ${{ matrix.php }} -s cgl -n
+        run: Build/Scripts/runTests.sh -b docker -p ${{ matrix.php }} -s cgl -n
 
       - name: Lint PHP
-        run: Build/Scripts/runTests.sh -p ${{ matrix.php }} -s lint
+        run: Build/Scripts/runTests.sh -b docker -p ${{ matrix.php }} -s lint
 
       - name: Phpstan
         if: ${{ matrix.php >= '8.2' }}
-        run: Build/Scripts/runTests.sh -p ${{ matrix.php }} -s phpstan
+        run: Build/Scripts/runTests.sh -b docker -p ${{ matrix.php }} -s phpstan
 
       - name: Unit Tests
-        run: Build/Scripts/runTests.sh -p ${{ matrix.php }} -s unit
+        run: Build/Scripts/runTests.sh -b docker -p ${{ matrix.php }} -s unit