diff --git a/script/build-libpathrs.sh b/script/build-libpathrs.sh
index 94b6c34e5..304e1af47 100755
--- a/script/build-libpathrs.sh
+++ b/script/build-libpathrs.sh
@@ -75,7 +75,7 @@ function build_libpathrs() {
 	local tar="libpathrs-${ver}.tar.xz"
 
 	# Download, check, and extract.
-	wget "https://github.com/cyphar/libpathrs/releases/download/v${ver}/${tar}"{,.asc}
+	curl -fsSL --remote-name-all "https://github.com/cyphar/libpathrs/releases/download/v${ver}/${tar}"{,.asc}
 	sha256sum --strict --check - <<<"${LIBPATHRS_SHA256[${ver}]} *${tar}"
 
 	local srcdir
diff --git a/script/build-seccomp.sh b/script/build-seccomp.sh
index 1c1b9671e..7dc6b1ff9 100755
--- a/script/build-seccomp.sh
+++ b/script/build-seccomp.sh
@@ -27,7 +27,7 @@ function build_libseccomp() {
 	local tar="libseccomp-${ver}.tar.gz"
 
 	# Download, check, and extract.
-	wget "https://github.com/seccomp/libseccomp/releases/download/v${ver}/${tar}"{,.asc}
+	curl -fsSL --remote-name-all "https://github.com/seccomp/libseccomp/releases/download/v${ver}/${tar}"{,.asc}
 	sha256sum --strict --check - <<<"${SECCOMP_SHA256[${ver}]} *${tar}"
 
 	local srcdir
diff --git a/script/setup_host.sh b/script/setup_host.sh
index 64226d4c2..f6993aa02 100755
--- a/script/setup_host.sh
+++ b/script/setup_host.sh
@@ -34,7 +34,7 @@ platform:el9 | platform:el10)
 esac
 
 # Install common packages
-RPMS=(cargo container-selinux fuse-sshfs git-core glibc-static golang iptables jq libseccomp-devel lld make policycoreutils wget)
+RPMS=(cargo container-selinux curl fuse-sshfs git-core glibc-static golang iptables jq libseccomp-devel lld make policycoreutils)
 # Work around dnf mirror failures by retrying a few times.
 for i in $(seq 0 2); do
 	sleep "$i"