diff --git a/.forgejo/workflows/verify.yaml b/.forgejo/workflows/verify.yaml
index d4fb5f8..4440769 100644
--- a/.forgejo/workflows/verify.yaml
+++ b/.forgejo/workflows/verify.yaml
@@ -32,9 +32,12 @@ jobs:
           rustup target add x86_64-unknown-linux-musl
 
       - name: Setup additional tooling
+        run: .forgejo/workflows/setup-tools.sh
+
+      - name: Setup permissions for ci user
         run: |
-          .forgejo/workflows/setup-tools.sh
-          git config --add safe.directory "$PWD"
+          useradd -m ci && chown -R ci:ci .
+          git config --global --add safe.directory "$PWD"
 
       - name: Build
         run: just ci build
diff --git a/.justfile b/.justfile
index 6dc9ac6..0236f9f 100644
--- a/.justfile
+++ b/.justfile
@@ -433,13 +433,13 @@ default:
 choose:
     @just --choose
 
+alias ch := choose
+
 [script, private]
 ci recipe:
-    id -u ci >/dev/null 2>&1 || useradd -m ci
-    chown -R ci:ci .
     su ci -c "just {{ recipe }}"
 
-alias ch := choose
+## VARIABLES
 
 export CARGO_TERM_COLOR := 'always'
 
@@ -460,4 +460,6 @@ lockfile_version := ```
         | grep version | cut -d '"' -f 2
     ```
 
+## OPTIONS
+
 set unstable