diff --git a/.gitea/workflows/prepare-release.yml b/.gitea/workflows/prepare-release.yml
index fff62a2..d157ba9 100644
--- a/.gitea/workflows/prepare-release.yml
+++ b/.gitea/workflows/prepare-release.yml
@@ -45,8 +45,15 @@ jobs:
       - name: Module hygiene
         run: |
           set -euo pipefail
+
           go mod tidy
-          go mod verify
+
+          if ! go mod verify; then
+            echo "go mod verify failed; refreshing module cache and retrying" >&2
+            go clean -modcache
+            go mod download
+            go mod verify
+          fi
 
       - name: Restore cached gosec binary
         id: cache-gosec
diff --git a/.gitea/workflows/push-validation.yml b/.gitea/workflows/push-validation.yml
index f833d1b..df99d29 100644
--- a/.gitea/workflows/push-validation.yml
+++ b/.gitea/workflows/push-validation.yml
@@ -41,8 +41,15 @@ jobs:
       - name: Module hygiene
         run: |
           set -euo pipefail
+
           go mod tidy
-          go mod verify
+
+          if ! go mod verify; then
+            echo "go mod verify failed; refreshing module cache and retrying" >&2
+            go clean -modcache
+            go mod download
+            go mod verify
+          fi
 
       - name: Restore cached gosec binary
         id: cache-gosec