diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
index 3ba723c..b13f5ad 100644
--- a/.forgejo/workflows/ci.yml
+++ b/.forgejo/workflows/ci.yml
@@ -64,13 +64,13 @@ jobs:
             --cache-to   "$CACHE_REPO" \
             --cache-from "$CACHE_REPO" \
             --target deps \
-            --signature-policy ~/.config/containers/policy-ci.json \
+            --signature-policy /home/ci-service/.config/containers/policy-ci.json \
             -f backend/Dockerfile.test-rust \
             -t "$PREBUILT_BACKEND_TEST_IMAGE:deps-${{ steps.cache-key.outputs.cache_key }}" \
             --layers
           
           podman --remote push \
-            --signature-policy ~/.config/containers/policy-ci.json \
+            --signature-policy /home/ci-service/.config/containers/policy-ci.json \
             "$PREBUILT_BACKEND_TEST_IMAGE:deps-${{ steps.cache-key.outputs.cache_key }}"
 
       - name: Build full test image with cached dependencies
@@ -80,7 +80,7 @@ jobs:
             --layers \
             --cache-from "$CACHE_REPO" \
             --target runner \
-            --signature-policy ~/.config/containers/policy-ci.json \
+            --signature-policy /home/ci-service/.config/containers/policy-ci.json \
             -f backend/Dockerfile.test-rust \
             -t "$PREBUILT_BACKEND_TEST_IMAGE:test-${{ github.sha }}" \
             .