diff --git a/.gitea/workflows/cve-triage.yaml b/.gitea/workflows/cve-triage.yaml
index ab1b843..5de9f2c 100644
--- a/.gitea/workflows/cve-triage.yaml
+++ b/.gitea/workflows/cve-triage.yaml
@@ -138,9 +138,8 @@ jobs:
           RENOVATE_DASHBOARD_ISSUE: "91"
           VULN_API_URL: http://vuln-scanner.vuln-scanner.svc.cluster.local:8081
           # The Service's pinned spec.clusterIP (platform/vuln-scanner/service.yaml), used only
-          # when the name above fails to resolve. Empty disables the fallback, and a DNS failure
-          # then fails the job.
-          VULN_API_FALLBACK_URL: ""
+          # when the name above fails to resolve. Keep the two in step.
+          VULN_API_FALLBACK_URL: http://10.43.210.10:8081
           VULN_PAGE_URL: https://cve.home.keithjackson.dev
           # Anything other than an explicit false on a dispatch is a dry run; a schedule is live.
           DRY_RUN: ${{ github.event_name == 'workflow_dispatch' && inputs.dry_run != 'false' && 'true' || 'false' }}