diff --git a/.github/workflows/build-app-only.yml b/.github/workflows/build-app-only.yml
index 2c672bf..88a3061 100644
--- a/.github/workflows/build-app-only.yml
+++ b/.github/workflows/build-app-only.yml
@@ -34,6 +34,7 @@ jobs:
           nvd/2022
           nvd/2023
           nvd/2024
+    - uses: oras-project/setup-oras@v1
     - name: Set up Python
       uses: actions/setup-python@v5
       with:
diff --git a/.github/workflows/build-vdb6.yml b/.github/workflows/build-vdb6.yml
index 7d6b1ee..1d13e83 100644
--- a/.github/workflows/build-vdb6.yml
+++ b/.github/workflows/build-vdb6.yml
@@ -34,6 +34,7 @@ jobs:
             nvd/2022
             nvd/2023
             nvd/2024
+      - uses: oras-project/setup-oras@v1
       - name: Set up Python
         uses: actions/setup-python@v5
         with:
@@ -131,6 +132,7 @@ jobs:
             nvd/2022
             nvd/2023
             nvd/2024
+      - uses: oras-project/setup-oras@v1
       - name: Set up Python
         uses: actions/setup-python@v5
         with:
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index c73177c..79b7092 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -26,6 +26,7 @@ jobs:
         repository: AppThreat/vuln-list
         path: vuln-list
         fetch-depth: '1'
+    - uses: oras-project/setup-oras@v1
     - name: Set up Python
       uses: actions/setup-python@v5
       with: