diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b4f8efd35..433dfbccb 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -35,6 +35,15 @@ jobs:
       - name: Configure npm mirror
         run: npm config set registry https://registry.npmmirror.com
 
+      # git 依赖（TurboWarp 的 scratch-* 是 git+ssh github 引用）在 runner 上
+      # 无法直连 github 且无 ssh 密钥 → 用 insteadOf 整体重写到代理。
+      # lock 保持 npm 的规范 ssh 形式（与 package.json 亲和，解析阶段可离线），
+      # 真正的 clone/ls-remote 由 git 配置在运行时透明替换。
+      - name: Proxy git remotes (insteadOf)
+        run: |
+          git config --global url."https://v4.gh-proxy.org/https://github.com/".insteadOf "ssh://git@github.com/"
+          git config --global url."https://v4.gh-proxy.org/https://github.com/".insteadOf "https://github.com/"
+
       - name: Install dependencies
         run: npm ci
 
diff --git a/package-lock.json b/package-lock.json
index 8e4244568..eaba325e4 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -18611,7 +18611,7 @@
     },
     "node_modules/scratch-audio": {
       "version": "0.1.0",
-      "resolved": "git+https://v4.gh-proxy.org/https://github.com/TurboWarp/scratch-audio.git#aba00cd02e36d95407effafa03f3678e4c669b30",
+      "resolved": "git+ssh://git@github.com/TurboWarp/scratch-audio.git#aba00cd02e36d95407effafa03f3678e4c669b30",
       "license": "BSD-3-Clause",
       "dependencies": {
         "@turbowarp/nanolog": "^0.2.0",
@@ -18626,7 +18626,7 @@
     },
     "node_modules/scratch-blocks": {
       "version": "0.1.0",
-      "resolved": "git+https://v4.gh-proxy.org/https://github.com/TurboWarp/scratch-blocks.git#4113c5348e6b4c76da9071a1800a62ab96ef793f",
+      "resolved": "git+ssh://git@github.com/TurboWarp/scratch-blocks.git#4113c5348e6b4c76da9071a1800a62ab96ef793f",
       "license": "GPL-3.0",
       "dependencies": {
         "exports-loader": "0.7.0",
@@ -18635,7 +18635,7 @@
     },
     "node_modules/scratch-paint": {
       "version": "2.1.61",
-      "resolved": "git+https://v4.gh-proxy.org/https://github.com/TurboWarp/scratch-paint.git#91d109564917e4df31705611a657e773fb23abbb",
+      "resolved": "git+ssh://git@github.com/TurboWarp/scratch-paint.git#91d109564917e4df31705611a657e773fb23abbb",
       "license": "GPL-3.0",
       "dependencies": {
         "@turbowarp/nanolog": "^0.2.0",
@@ -18675,7 +18675,7 @@
     },
     "node_modules/scratch-parser": {
       "version": "0.0.0-development",
-      "resolved": "git+https://v4.gh-proxy.org/https://github.com/TurboWarp/scratch-parser.git#fb65ba09d78ab6a0d19ce908d64b72d1a122312f",
+      "resolved": "git+ssh://git@github.com/TurboWarp/scratch-parser.git#fb65ba09d78ab6a0d19ce908d64b72d1a122312f",
       "license": "MPL-2.0",
       "dependencies": {
         "@turbowarp/json": "^0.1.1",
@@ -18713,7 +18713,7 @@
     },
     "node_modules/scratch-render": {
       "version": "0.1.0",
-      "resolved": "git+https://v4.gh-proxy.org/https://github.com/TurboWarp/scratch-render.git#a67f7c9c07d459582c227d4fd3fae8f59d8fc9ce",
+      "resolved": "git+ssh://git@github.com/TurboWarp/scratch-render.git#a67f7c9c07d459582c227d4fd3fae8f59d8fc9ce",
       "license": "MPL-2.0",
       "dependencies": {
         "@turbowarp/ancient-hull.js": "^0.2.13",
@@ -18729,7 +18729,7 @@
     },
     "node_modules/scratch-render-fonts": {
       "version": "1.0.0",
-      "resolved": "git+https://v4.gh-proxy.org/https://github.com/TurboWarp/scratch-render-fonts.git#7b6768fc6dfef6b343a06f992587b74807043961",
+      "resolved": "git+ssh://git@github.com/TurboWarp/scratch-render-fonts.git#7b6768fc6dfef6b343a06f992587b74807043961",
       "peer": true,
       "dependencies": {
         "base64-loader": "1.0.0"
@@ -18774,7 +18774,7 @@
     },
     "node_modules/scratch-vm": {
       "version": "2.1.46",
-      "resolved": "git+https://v4.gh-proxy.org/https://github.com/TurboWarp/scratch-vm.git#01178fb80f1f7c40bb9515b4cfd8cb0aa520d1f4",
+      "resolved": "git+ssh://git@github.com/TurboWarp/scratch-vm.git#01178fb80f1f7c40bb9515b4cfd8cb0aa520d1f4",
       "license": "MPL-2.0",
       "dependencies": {
         "@turbowarp/json": "^0.1.2",