diff --git a/.gitea/workflows/validate.yml b/.gitea/workflows/validate.yml
index 0a9d5ae..07056a7 100644
--- a/.gitea/workflows/validate.yml
+++ b/.gitea/workflows/validate.yml
@@ -28,4 +28,11 @@ jobs:
         run: pnpm install --frozen-lockfile
 
       - name: Run validation (svelte-check + build)
+        # Stub env so the build-time analyse step can import src/lib/server/env.ts
+        # without connecting to anything. Values match the Zod schema's shape only.
+        env:
+          DATABASE_URL: postgres://ci:ci@localhost:5432/ci
+          SESSION_SECRET: 0000000000000000000000000000000000000000000000000000000000000000
+          STORAGE_SIGNING_SECRET: 0000000000000000000000000000000000000000000000000000000000000000
+          PUBLIC_BASE_URL: http://localhost:5173
         run: pnpm run validate
diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index 0a9d5ae..07056a7 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -28,4 +28,11 @@ jobs:
         run: pnpm install --frozen-lockfile
 
       - name: Run validation (svelte-check + build)
+        # Stub env so the build-time analyse step can import src/lib/server/env.ts
+        # without connecting to anything. Values match the Zod schema's shape only.
+        env:
+          DATABASE_URL: postgres://ci:ci@localhost:5432/ci
+          SESSION_SECRET: 0000000000000000000000000000000000000000000000000000000000000000
+          STORAGE_SIGNING_SECRET: 0000000000000000000000000000000000000000000000000000000000000000
+          PUBLIC_BASE_URL: http://localhost:5173
         run: pnpm run validate