diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 6fcbb3f..003a60d 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,6 +1,15 @@
 version: 2
+registries:
+  pkg-kiwitcms-eu:
+    type: python-index
+    replaces-base: false
+    url: https://pkg.kiwitcms.eu/pypi/
+    token: ${{ secrets.GEMFURY_PULL_TOKEN }}
+
 updates:
   - package-ecosystem: pip
+    registries: "*"
+    insecure-external-code-execution: allow
     directory: "/"
     schedule:
       interval: daily
diff --git a/.github/workflows/testing.yml b/.github/workflows/testing.yml
index 5e53e61..d373cdf 100644
--- a/.github/workflows/testing.yml
+++ b/.github/workflows/testing.yml
@@ -82,10 +82,12 @@ jobs:
         env:
           QUAY_IO_TOKEN: ${{ secrets.QUAY_IO_TOKEN }}
           GEMFURY_API_TOKEN: ${{ secrets.GEMFURY_API_TOKEN }}
-
+          PKG_TOKEN: ${{ secrets.GEMFURY_PULL_TOKEN }}
         run: |
           pip install -U pip wheel setuptools
-          pip install -r devel.txt
+          pip install -r devel.txt \
+            --index-url https://$PKG_TOKEN@pkg.kiwitcms.eu/pypi/ \
+            --extra-index-url https://pypi.org/simple/
 
           # report to Kiwi TCMS only if we have access to secrets
           if [ -n "${{ secrets.TCMS_PASSWORD }}" ]; then
@@ -127,9 +129,13 @@ jobs:
           sudo apt-get install -y ca-certificates
 
       - name: Install Python dependencies
+        env:
+          PKG_TOKEN: ${{ secrets.GEMFURY_PULL_TOKEN }}
         run: |
           pip install -U pip wheel setuptools
-          pip install -r devel.txt
+          pip install -r devel.txt \
+            --index-url https://$PKG_TOKEN@pkg.kiwitcms.eu/pypi/ \
+            --extra-index-url https://pypi.org/simple/
 
       - name: Login to Private Container Registry
         run: |