diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 3c9b5bc..c4010c7 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -28,7 +28,9 @@ cache:
 # ─── TEST ──────────────────────────────────────
 maven-test:
   stage: test
-  image: maven:3.9.9-eclipse-temurin-21
+  image:
+    name: maven:3.9.9-eclipse-temurin-21
+    pull_policy: if-not-present
   script:
     - mvn $MAVEN_CLI_OPTS verify
   artifacts:
@@ -40,7 +42,9 @@ maven-test:
 # ─── BUILD (Maven jars) ────────────────────────
 maven-package:
   stage: build
-  image: maven:3.9.9-eclipse-temurin-21
+  image:
+    name: maven:3.9.9-eclipse-temurin-21
+    pull_policy: if-not-present
   script:
     - mvn $MAVEN_CLI_OPTS package -DskipTests
   artifacts:
@@ -52,11 +56,14 @@ maven-package:
 # ─── PUBLISH (Docker images) ───────────────────
 .docker_base: &docker_base
   stage: publish
-  image: docker:26
+  image:
+    name: docker:26
+    pull_policy: if-not-present
   services:
     - name: docker:26-dind
       alias: docker
       command: ["--tls=false"]
+      pull_policy: if-not-present
   variables:
     DOCKER_HOST: tcp://docker:2375
     DOCKER_TLS_CERTDIR: ""