diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 78cda40..bb3eab1 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1,7 +1,7 @@
 build-android:
   image: golang:1.25.9-trixie # according to the original ~1.25.7
   before_script: |
-    sudo apt update && sudo apt install -y openjdk-17-jdk-headless
+    apt update && apt install -y openjdk-17-jdk-headless
     /usr/lib/jvm/java-17-openjdk-amd64/bin/java --version
     mkdir -p ~/.ssh && ssh-keyscan -p 22 -t rsa,ed25519 git.inker.bot >> ~/.ssh/known_hosts
   script:
diff --git a/bin/update b/bin/update
index c64512a..4286254 100755
--- a/bin/update
+++ b/bin/update
@@ -8,6 +8,8 @@ REV_FILE="$ROOT/works/rev"
 
 # defaults
 REPO_URL="git@git.inker.bot:arknights/sing-box.git"
+if [[ $CI_JOB_TOKEN != "" ]]; then
+  REPO_URL=$(echo $REPO_URL | sed -i "s/git/gitlab-ci-token:$CI_JOB_TOKEN/")
 UPSTREAM_BRANCH="main"
 
 CONFIG="$ROOT/works/config"