diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
index 3dc39ed..3164fb2 100644
--- a/.forgejo/workflows/ci.yml
+++ b/.forgejo/workflows/ci.yml
@@ -31,20 +31,18 @@ jobs:
 
     container:
       image: ghcr.io/catthehacker/ubuntu:act-22.04
+      # you can keep these, but the host-level volumes stanza already mounts the socket:
       options: >-
-        --read-only=false
         -v /run/user/999/podman:/run/user/999/podman:rw
         -e XDG_RUNTIME_DIR=/run/user/999
     env:
       CONTAINER_HOST: unix:///run/user/999/podman/podman.sock
     steps:
       - name: Install Podman client
-        env:
-          DEBIAN_FRONTEND: noninteractive
+        env: { DEBIAN_FRONTEND: noninteractive }
         run: |
           apt-get update
           apt-get install -y --no-install-recommends podman jq
-          
       - uses: actions/checkout@v4
 
       - name: Verify runner wiring to Podman
@@ -150,20 +148,18 @@ jobs:
 
     container:
       image: ghcr.io/catthehacker/ubuntu:act-22.04
+      # you can keep these, but the host-level volumes stanza already mounts the socket:
       options: >-
-        --read-only=false
         -v /run/user/999/podman:/run/user/999/podman:rw
         -e XDG_RUNTIME_DIR=/run/user/999
     env:
       CONTAINER_HOST: unix:///run/user/999/podman/podman.sock
     steps:
       - name: Install Podman client
-        env:
-          DEBIAN_FRONTEND: noninteractive
+        env: { DEBIAN_FRONTEND: noninteractive }
         run: |
           apt-get update
           apt-get install -y --no-install-recommends podman jq
-
       - uses: actions/checkout@v4
 
       - name: Verify runner wiring to Podman
@@ -221,20 +217,18 @@ jobs:
 
     container:
       image: ghcr.io/catthehacker/ubuntu:act-22.04
+      # you can keep these, but the host-level volumes stanza already mounts the socket:
       options: >-
-        --read-only=false
         -v /run/user/999/podman:/run/user/999/podman:rw
         -e XDG_RUNTIME_DIR=/run/user/999
     env:
       CONTAINER_HOST: unix:///run/user/999/podman/podman.sock
     steps:
       - name: Install Podman client
-        env:
-          DEBIAN_FRONTEND: noninteractive
+        env: { DEBIAN_FRONTEND: noninteractive }
         run: |
           apt-get update
           apt-get install -y --no-install-recommends podman jq
-
       - uses: actions/checkout@v4
 
       - name: Verify runner wiring to Podman
@@ -301,20 +295,18 @@ jobs:
 
     container:
       image: ghcr.io/catthehacker/ubuntu:act-22.04
+      # you can keep these, but the host-level volumes stanza already mounts the socket:
       options: >-
-        --read-only=false
         -v /run/user/999/podman:/run/user/999/podman:rw
         -e XDG_RUNTIME_DIR=/run/user/999
     env:
       CONTAINER_HOST: unix:///run/user/999/podman/podman.sock
     steps:
       - name: Install Podman client
-        env:
-          DEBIAN_FRONTEND: noninteractive
+        env: { DEBIAN_FRONTEND: noninteractive }
         run: |
           apt-get update
           apt-get install -y --no-install-recommends podman jq
-
       - uses: actions/checkout@v4
 
       - name: Verify runner wiring to Podman
@@ -382,20 +374,18 @@ jobs:
 
     container:
       image: ghcr.io/catthehacker/ubuntu:act-22.04
+      # you can keep these, but the host-level volumes stanza already mounts the socket:
       options: >-
-        --read-only=false
         -v /run/user/999/podman:/run/user/999/podman:rw
         -e XDG_RUNTIME_DIR=/run/user/999
     env:
       CONTAINER_HOST: unix:///run/user/999/podman/podman.sock
     steps:
       - name: Install Podman client
-        env:
-          DEBIAN_FRONTEND: noninteractive
+        env: { DEBIAN_FRONTEND: noninteractive }
         run: |
           apt-get update
           apt-get install -y --no-install-recommends podman jq
-
       - uses: actions/checkout@v4
 
       - name: Verify Podman in job container