diff --git a/.gitea/actions/buildkit-build-push-dev/action.yaml b/.gitea/actions/buildkit-build-push-dev/action.yaml
index 81e7282..d5f6aea 100644
--- a/.gitea/actions/buildkit-build-push-dev/action.yaml
+++ b/.gitea/actions/buildkit-build-push-dev/action.yaml
@@ -44,7 +44,6 @@ runs:
         PASS='${{ inputs.registry_password }}'
 
         AUTH_INLINE=$(printf '%s:%s' "$USER" "$PASS" | base64 -w0)
-
         echo "AUTH_INLINE generated successfully"
 
         # Build JSON safely
@@ -61,12 +60,14 @@ runs:
         AUTH_JSON="${AUTH_JSON/__REGISTRY__/${{ inputs.registry_addr }}}"
         AUTH_JSON="${AUTH_JSON/__AUTH__/$AUTH_INLINE}"
 
-        # Build build-arg flags
+        # FIX: avoid unbound variable
+        BUILD_ARGS="${{ inputs.build_args:-}}"
+
         BUILD_ARG_FLAGS=""
         while IFS= read -r line; do
           [[ -z "$line" ]] && continue
           BUILD_ARG_FLAGS="$BUILD_ARG_FLAGS --opt build-arg:${line}"
-        done <<< "${{ inputs.build_args }}"
+        done <<< "$BUILD_ARGS"
 
         echo "Using build args: $BUILD_ARG_FLAGS"
 
@@ -79,3 +80,4 @@ runs:
           --opt filename=${{ inputs.filename }} \
           $BUILD_ARG_FLAGS \
           --output type=image,name=${{ inputs.tags }},push=true,registry.config="$AUTH_JSON"
+
diff --git a/.gitea/workflows/ssh-client-build-deploy.yaml b/.gitea/workflows/ssh-client-build-deploy.yaml
index 79ed2dd..cc0bc0d 100644
--- a/.gitea/workflows/ssh-client-build-deploy.yaml
+++ b/.gitea/workflows/ssh-client-build-deploy.yaml
@@ -16,6 +16,7 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v2
 
+
       - name: Fetch limbo public actions
         env: 
           RUNNER_TEMP: "${{ runner.temp }}"