diff --git a/.woodpecker.yml b/.woodpecker.yml
index 47a5008..f05e098 100644
--- a/.woodpecker.yml
+++ b/.woodpecker.yml
@@ -6,7 +6,6 @@ name: prod-promotion
 steps:
   - name: promote-tag-and-mirror
     image: google/cloud-sdk:latest
-    privileged: true
     entrypoint:
       - bash
       - -c
@@ -41,7 +40,6 @@ steps:
         echo "🏷  Promoted IMG_TAG=${IMG_TAG} → aptivaai-prod & mirrored images"
 
   - name: verify-sync
-    privileged: true
     depends_on: [promote-tag-and-mirror]
     image: google/cloud-sdk:latest
     entrypoint:
@@ -65,7 +63,6 @@ steps:
         echo "✅ Prod AR has all images at :$IMG_TAG"
 
   - name: security-scan
-    privileged: true
     depends_on: [verify-sync]
     image: google/cloud-sdk:latest
     entrypoint:
@@ -94,7 +91,6 @@ steps:
         trivy image --username oauth2accesstoken --password "$TOKEN" --scanners vuln --ignore-unfixed --ignorefile .trivyignore --exit-code 1 --severity CRITICAL "$REG/nginx:$IMG_TAG"
 
   - name: prod-deploy
-    privileged: true
     depends_on: [security-scan]
     image: google/cloud-sdk:latest
     entrypoint: