diff --git a/.gitea/workflows/ci.yaml b/.gitea/workflows/ci.yaml
index 131c81a..d360c9c 100644
--- a/.gitea/workflows/ci.yaml
+++ b/.gitea/workflows/ci.yaml
@@ -72,6 +72,7 @@ jobs:
             --name devops-platform \
             --restart unless-stopped \
             --read-only \
+            --cap-drop=ALL \
             -p 127.0.0.1:8000:8000 \
             "$IMAGE"; then
             echo "New container started"
@@ -81,6 +82,7 @@ jobs:
               --name devops-platform \
               --restart unless-stopped \
               --read-only \
+              --cap-drop=ALL \
               -p 127.0.0.1:8000:8000 \
               "$OLD_IMAGE"
             exit 1
@@ -107,6 +109,7 @@ jobs:
               --name devops-platform \
               --restart unless-stopped \
               --read-only \
+              --cap-drop=ALL \
               -p 127.0.0.1:8000:8000 \
               "$OLD_IMAGE"
             exit 1