diff --git a/.gitea/workflows/publish-docker.yml b/.gitea/workflows/publish-docker.yml
index 97dd965..5e8442a 100644
--- a/.gitea/workflows/publish-docker.yml
+++ b/.gitea/workflows/publish-docker.yml
@@ -28,7 +28,7 @@ jobs:
 
       - name: Security Lint Dockerfile (Trivy)
         run: |
-          trivy config .
+          trivy config --exit-code 1 --severity CRITICAL,HIGH .
 
       - name: Log in to Gitea Container Registry
         uses: docker/login-action@v3