diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
index 27cd33dd..d3d68d9e 100644
--- a/.forgejo/workflows/ci.yml
+++ b/.forgejo/workflows/ci.yml
@@ -18,7 +18,7 @@ jobs:
     name: Build and Test
     runs-on: ubuntu-latest
     container:
-      image: debian:trixie-slim
+      image: python:3.13-slim-trixie
 
     steps:
       - name: Test secret priority
@@ -40,7 +40,8 @@ jobs:
 
       - name: Setup environment
         run: |
-          # Using Debian Trixie (testing) for modern OSTree packages with full features
+          # Using Python 3.13-slim-trixie for modern Python + Debian Trixie packages
+          # Trixie provides modern OSTree packages with full features
           # Bookworm (stable) has outdated OSTree packages missing critical functionality
           # Try apt-cacher-ng first, fallback to Debian's automatic mirror selection
           echo "Checking for apt-cacher-ng availability..."
@@ -98,6 +99,10 @@ jobs:
 
       - name: Setup Python environment
         run: |
+          # Python 3.13 is pre-installed in python:3.13-slim-trixie
+          echo "Python version: $(python3 --version)"
+          echo "Pip version: $(pip3 --version)"
+          
           # Create virtual environment
           python3 -m venv venv
           source venv/bin/activate
@@ -180,7 +185,7 @@ jobs:
           echo '' >> CI_SUMMARY.md
           echo '## Build Status' >> CI_SUMMARY.md
           echo '- **Status**: ✅ SUCCESS' >> CI_SUMMARY.md
-          echo '- **Container**: debian:trixie-slim' >> CI_SUMMARY.md
+          echo '- **Container**: python:3.13-slim-trixie' >> CI_SUMMARY.md
           echo '- **Python Version**: '"$(python3 --version)" >> CI_SUMMARY.md
           echo '' >> CI_SUMMARY.md
           echo '## Built Packages' >> CI_SUMMARY.md
@@ -331,7 +336,7 @@ jobs:
     name: Security Audit
     runs-on: ubuntu-latest
     container:
-      image: debian:trixie-slim
+      image: python:3.13-slim-trixie
 
     steps:
       - name: Setup environment
@@ -370,7 +375,7 @@ jobs:
     name: Package Validation
     runs-on: ubuntu-latest
     container:
-      image: debian:trixie-slim
+      image: python:3.13-slim-trixie
 
     steps:
       - name: Setup environment
@@ -438,7 +443,7 @@ jobs:
     name: Status Report
     runs-on: ubuntu-latest
     container:
-      image: debian:trixie-slim
+      image: python:3.13-slim-trixie
     needs: [build-and-test, security, package]
 
     steps:
@@ -469,7 +474,7 @@ jobs:
           echo "- **Commit**: $(git rev-parse --short HEAD 2>/dev/null || echo 'Unknown')" >> STATUS_REPORT.md
           echo "- **Branch**: $(git branch --show-current 2>/dev/null || echo 'Unknown')" >> STATUS_REPORT.md
           echo "- **Date**: $(date '+%Y-%m-%d %H:%M:%S UTC')" >> STATUS_REPORT.md
-          echo "- **Container**: debian:trixie-slim" >> STATUS_REPORT.md
+          echo "- **Container**: python:3.13-slim-trixie" >> STATUS_REPORT.md
           echo "" >> STATUS_REPORT.md
           echo "All CI jobs completed successfully! 🎉" >> STATUS_REPORT.md
           echo "" >> STATUS_REPORT.md