diff --git a/.github/workflows/submit-app-store-review.yml b/.github/workflows/submit-app-store-review.yml
index 7c1c495..1d40f74 100644
--- a/.github/workflows/submit-app-store-review.yml
+++ b/.github/workflows/submit-app-store-review.yml
@@ -49,7 +49,10 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Install Python Dependencies
-        run: python3 -m pip install --user cryptography
+        run: |
+          python3 -m venv .build/submit-review-venv
+          .build/submit-review-venv/bin/python -m pip install --upgrade pip
+          .build/submit-review-venv/bin/python -m pip install cryptography
 
       - name: Submit Review
         shell: bash
@@ -66,4 +69,8 @@ jobs:
           if [[ "${{ inputs.dry_run }}" == "true" ]]; then
             args+=(--dry-run)
           fi
-          scripts/submit-app-store-review.py "${args[@]}"
+          submit=(
+            .build/submit-review-venv/bin/python
+            scripts/submit-app-store-review.py
+          )
+          "${submit[@]}" "${args[@]}"