diff --git a/Jenkinsfile b/Jenkinsfile
index 793e384..c80f53f 100644
--- a/Jenkinsfile
+++ b/Jenkinsfile
@@ -1,5 +1,8 @@
 pipeline {
-    agent any
+    agent {
+        label 'ssh-agent'
+    }
+
 
     environment {
         REGISTRY    = 'gitea.zb-kw.duckdns.org'
@@ -61,6 +64,12 @@ pipeline {
         }
 
         stage('Scan') {
+            agent {
+                docker {
+                    image 'aquasec:trivy'
+                    reuseNode true
+                }
+            }
             steps {
                 sh 'trivy image --exit-code 0 --severity HIGH,CRITICAL $IMAGE:$TAG'
             }