Forgejo Runner spawns each job on a per-job custom Docker network whose gateway is not the default bridge (172.17.0.1). Detecting the default route inside the container picks up whatever bridge gateway is in use.