diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index cf82fd1..c1fec69 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -228,7 +228,7 @@ jobs:
     env:
       TOKEN: ${{ secrets.GITHUB_TOKEN }}
       SHA: ${{ github.event.pull_request.head.sha || github.sha }}
-      CONTEXT: github/ci (${{ github.ref_type == 'tag' && 'tag' || 'branch' }})
+      CONTEXT: github/ci (${{ github.ref_type == 'tag' && format('tag {0}', github.ref_name) || 'branch' }})
     steps:
       - run: apt-get update -qq && apt-get install -y -qq --no-install-recommends ca-certificates curl jq >/dev/null
       - shell: bash
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f782c0e..3fdbd36 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -47,7 +47,9 @@ env:
   REGISTRY: ${{ vars.REGISTRY }}
   # A registry path must be lowercase; the repository name already is.
   IMAGE: ${{ vars.REGISTRY }}/inbuxa/ihasmail-inbuxa
-  STATUS_CONTEXT: github/ci (${{ github.ref_type }})
+  # A tag's context names the tag: upstream v* and inbuxa-v* tags can sit on
+  # the same commit, and Gitea must not read one tag's result as the other's.
+  STATUS_CONTEXT: github/ci (${{ github.ref_type == 'tag' && format('tag {0}', github.ref_name) || 'branch' }})
 
 jobs:
   # Tells Gitea a result is on its way, so a PR shows the check as running
@@ -179,7 +181,10 @@ jobs:
         with:
           name: digest-${{ strategy.job-index }}
           path: /tmp/digests/*
-          retention-days: 1
+          # Kept a week, and overwritable, so a re-run of the build or of
+          # publish alone still finds (or replaces) the digests.
+          retention-days: 7
+          overwrite: true
           if-no-files-found: error
 
   # Joins the digests into `:<version>` and `:latest`, links the package to