diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 2f5e435..4f41853 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -157,11 +157,14 @@ jobs:
         run: |
           pip install -U pip
           pip install -U "setuptools<69" wheel twine
+          # Remove this hack once 'cffi' has a release supporting Python 3.13.
+          pip install -e "git+https://github.com/python-cffi/cffi.git#egg=cffi"
       - name: Install Build Dependencies
         if: matrix.python-version != '3.13'
         run: |
           pip install -U pip
           pip install -U "setuptools<69" wheel twine
+          pip install cffi
           pip install -U zope.proxy
 
       - name: Build zope.security (macOS x86_64)
@@ -329,6 +332,8 @@ jobs:
         if: matrix.python-version == '3.13'
         run: |
           pip install -U wheel "setuptools<69"
+          # Remove this hack once 'cffi' has a release supporting Python 3.13.
+          pip install -e "git+https://github.com/python-cffi/cffi.git#egg=cffi"
           # coverage might have a wheel on PyPI for a future python version which is
           # not ABI compatible with the current one, so build it from sdist:
           pip install -U --no-binary :all: coverage