diff --git a/.woodpecker/build-container.yml b/.woodpecker/build-container.yml
index beaba4f..f19c510 100644
--- a/.woodpecker/build-container.yml
+++ b/.woodpecker/build-container.yml
@@ -14,7 +14,8 @@ steps:
       repo: thegeeklab/${CI_REPO_NAME}
 
   - name: security-scan
-    image: ghcr.io/aquasecurity/trivy
+    image: docker.io/aquasec/trivy
+    depends_on: security-build
     commands:
       - trivy -v
       - trivy image --input oci/${CI_REPO_NAME}
@@ -28,7 +29,7 @@ steps:
 
   - name: publish-dockerhub
     image: quay.io/thegeeklab/wp-docker-buildx:5
-    group: container
+    depends_on: security-scan
     settings:
       auto_tag: true
       containerfile: Containerfile.multiarch
@@ -49,7 +50,7 @@ steps:
 
   - name: publish-quay
     image: quay.io/thegeeklab/wp-docker-buildx:5
-    group: container
+    depends_on: security-scan
     settings:
       auto_tag: true
       containerfile: Containerfile.multiarch
diff --git a/.woodpecker/docs.yml b/.woodpecker/docs.yml
index 7cb883d..d4c60e4 100644
--- a/.woodpecker/docs.yml
+++ b/.woodpecker/docs.yml
@@ -8,13 +8,11 @@ when:
 steps:
   - name: markdownlint
     image: quay.io/thegeeklab/markdownlint-cli
-    group: test
     commands:
       - markdownlint 'README.md'
 
   - name: spellcheck
     image: quay.io/thegeeklab/alpine-tools
-    group: test
     commands:
       - spellchecker --files '_docs/**/*.md' 'README.md' -d .dictionary -p spell indefinite-article syntax-urls
     environment:
@@ -22,12 +20,12 @@ steps:
 
   - name: link-validation
     image: docker.io/lycheeverse/lychee
-    group: test
     commands:
       - lychee --no-progress --format detailed README.md
 
   - name: pushrm-dockerhub
     image: docker.io/chko/docker-pushrm:1
+    depends_on: [markdownlint, spellcheck, link-validation]
     environment:
       DOCKER_USER:
         from_secret: docker_username
@@ -44,6 +42,7 @@ steps:
 
   - name: pushrm-quay
     image: docker.io/chko/docker-pushrm:1
+    depends_on: [markdownlint, spellcheck, link-validation]
     environment:
       APIKEY__QUAY_IO:
         from_secret: quay_token