diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
index f2be213..5b23e9a 100644
--- a/.forgejo/workflows/ci.yml
+++ b/.forgejo/workflows/ci.yml
@@ -21,7 +21,7 @@ env:
 
 jobs:
   lint:
-    runs-on: ubuntu-latest
+    runs-on: docker-x64
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-python@v5
@@ -34,7 +34,7 @@ jobs:
       - run: ruff format --check .
 
   typecheck:
-    runs-on: ubuntu-latest
+    runs-on: docker-x64
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-python@v5
@@ -46,7 +46,7 @@ jobs:
       - run: mypy --python-version 3.12 --strict --ignore-missing-imports --exclude 'build/|dist/|.git/|__pycache__/' *.py
 
   test:
-    runs-on: ubuntu-latest
+    runs-on: docker-x64
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-python@v5
@@ -58,7 +58,7 @@ jobs:
       - run: pytest tests/ -v --cov=. --cov-report=term-missing --cov-fail-under=40
 
   security:
-    runs-on: ubuntu-latest
+    runs-on: docker-x64
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-python@v5
@@ -70,7 +70,7 @@ jobs:
       - run: bandit -r . -x tests/,.venv,__pycache__
 
   gitleaks:
-    runs-on: ubuntu-latest
+    runs-on: docker-x64
     steps:
       - uses: actions/checkout@v4
         with:
@@ -81,7 +81,7 @@ jobs:
 
   commitlint:
     if: github.event_name == 'pull_request'
-    runs-on: ubuntu-latest
+    runs-on: docker-x64
     steps:
       - uses: actions/checkout@v4
         with: