diff --git a/.ansible-lint b/.ansible-lint
index 9b9b52a..2b580a2 100644
--- a/.ansible-lint
+++ b/.ansible-lint
@@ -3,6 +3,7 @@
 exclude_paths:
   - ".gitlab/*"
   - ".gitlab-ci.yml"
+  - ".woodpecker/*"
   - "defaults/main.yaml"
   - "meta/main.yaml"
   - "vars/*"
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
deleted file mode 100644
index 7ec2c37..0000000
--- a/.gitlab-ci.yml
+++ /dev/null
@@ -1,13 +0,0 @@
----
-
-# gitlab stages
-stages:
-  - "gitleaks"
-  - "linting"
-
-# include components
-include:
-  - component: "$CI_SERVER_FQDN/components/ansible/linting@v3.0.3"
-  - component: "$CI_SERVER_FQDN/components/gitleaks/gitleaks@v1.0.0"
-  - component: "$CI_SERVER_FQDN/components/markdownlint/markdownlint@1.0.0"
-  - component: "$CI_SERVER_FQDN/components/yamllint/yamllint@1.0.2"
diff --git a/.woodpecker/linting.yml b/.woodpecker/linting.yml
new file mode 100644
index 0000000..02cf4c2
--- /dev/null
+++ b/.woodpecker/linting.yml
@@ -0,0 +1,41 @@
+---
+when:
+  - event: "push"
+    branch: "main"
+  - event: "manual"
+
+steps:
+
+  # gitleaks
+  - name: "gitleaks"
+    # renovate: datasource=github-releases depName=gitleaks/gitleaks
+    image: "cr.simoncor.net/ghcr/gitleaks/gitleaks:v8.30.1"
+    commands:
+      - "gitleaks detect --source . --verbose --redact"
+
+  # yamllint
+  - name: "yamllint"
+    # renovate: datasource=docker depName=cr.simoncor.net/yamllint
+    image: "cr.simoncor.net/yamllint:1.38.0"
+    depends_on:
+      - "gitleaks"
+    commands:
+      - "yamllint -c .yamllint ."
+
+  # ansible-lint
+  - name: "ansible-lint"
+    # renovate: datasource=docker depName=docker.io/pipelinecomponents/ansible-lint
+    image: "cr.simoncor.net/dockerhub/pipelinecomponents/ansible-lint:0.79.11"
+    depends_on:
+      - "gitleaks"
+    commands:
+      - "ansible-lint -c .ansible-lint ."
+
+  # markdownlint
+  - name: "markdownlint"
+    # renovate: datasource=docker depName=docker.io/davidanson/markdownlint-cli2
+    image: "cr.simoncor.net/dockerhub/davidanson/markdownlint-cli2:v0.22.1"
+    depends_on:
+      - "gitleaks"
+    commands:
+      - "markdownlint-cli2 --config .markdownlint-cli2.jsonc"
diff --git a/readme.md b/readme.md
index 1e02999..b3c7660 100644
--- a/readme.md
+++ b/readme.md
@@ -6,10 +6,10 @@ Configure system baseline with common settings and Zabbix monitoring.
 
 This playbook includes the following roles:
 
-| Role | Description | Repository |
-|------|-------------|------------|
-| `common` | Core OS components and system defaults | [ans-common](https://gitlab.simoncor.net/ansible/ans-common) |
-| `zabbix_agent` | Zabbix Agent 2 monitoring | [ans-zabbix-agent](https://gitlab.simoncor.net/ansible/ans-zabbix-agent) |
+| Role           | Description                            | Repository                                                               |
+| -------------- | -------------------------------------- | ------------------------------------------------------------------------ |
+| `common`       | Core OS components and system defaults | [ans-common](https://gitlab.simoncor.net/ansible/ans-common)             |
+| `zabbix_agent` | Zabbix Agent 2 monitoring              | [ans-zabbix-agent](https://gitlab.simoncor.net/ansible/ans-zabbix-agent) |
 
 ## Usage