diff --git a/.forgejo/workflows/tests.yaml b/.forgejo/workflows/tests.yaml
new file mode 100644
index 00000000..1e2ac108
--- /dev/null
+++ b/.forgejo/workflows/tests.yaml
@@ -0,0 +1,37 @@
+on: [push, pull_request]
+jobs:
+  flake8:
+    runs-on: podman
+    container:
+      image: quay.io/tkopecek/koji-fedora-test:f44@sha256:5e1187ee4536674e08961cbe6b1b84dfc9df15a513dee328365909be5a0d5ed8
+    steps:
+      - run: >-
+          git clone ${{ forgejo.event.pull_request.head.repo.clone_url || format('{0}/{1}', forgejo.server_url, forgejo.repository) }} . &&
+          git checkout ${{ forgejo.event.pull_request.head.sha || forgejo.sha }}
+      - run: make flake8
+  bandit:
+    runs-on: podman
+    container:
+      image: quay.io/tkopecek/koji-fedora-test:f44@sha256:5e1187ee4536674e08961cbe6b1b84dfc9df15a513dee328365909be5a0d5ed8
+    steps:
+      - run: >-
+          git clone ${{ forgejo.event.pull_request.head.repo.clone_url || format('{0}/{1}', forgejo.server_url, forgejo.repository) }} . &&
+          git checkout ${{ forgejo.event.pull_request.head.sha || forgejo.sha }}
+      - run: make bandit
+  tests:
+    runs-on: podman
+    strategy:
+      matrix:
+        variant:
+          - koji-fedora-test:43@sha256:cf1ef55da0d7dd9251b79263c4d1e2350d4291fcd6dc54a1e751d3fe2cf4614d
+          - koji-fedora-test:44@sha256:5e1187ee4536674e08961cbe6b1b84dfc9df15a513dee328365909be5a0d5ed8
+          - koji-fedora-test:rawhide@sha256:5e1187ee4536674e08961cbe6b1b84dfc9df15a513dee328365909be5a0d5ed8
+          - koji-centos-test:9@sha256:c5fe30a62d4b62b46acdf764bf1f7293e9fa4287972ec6a86ccb43209646dc32
+          - koji-centos-test:10@sha256:1f53b2b040e449b0cfce526f1a221e6dbd6648506270220ea333728a6b52a90b
+    container:
+      image: quay.io/tkopecek/${{matrix.variant}}
+    steps:
+      - run: >-
+          git clone ${{ forgejo.event.pull_request.head.repo.clone_url || format('{0}/{1}', forgejo.server_url, forgejo.repository) }} . &&
+          git checkout ${{ forgejo.event.pull_request.head.sha || forgejo.sha }}
+      - run: make test3
diff --git a/devtools/containers/Dockerfile.centos10 b/devtools/containers/Dockerfile.centos10
new file mode 100644
index 00000000..a5782082
--- /dev/null
+++ b/devtools/containers/Dockerfile.centos10
@@ -0,0 +1,17 @@
+FROM quay.io/centos/centos:stream10
+
+RUN \
+  dnf -y update --nodocs --setopt=install_weak_deps=False && \
+  dnf install -y --nodocs --setopt=install_weak_deps=False epel-release && \
+  dnf install -y --nodocs --setopt=install_weak_deps=False --enablerepo crb \
+  git \
+  gcc \
+  glibc-langpack-en \
+  krb5-devel \
+  python3-defusedxml \
+  python3-devel \
+  python3-librepo \
+  python3-setuptools \
+  python3-tox \
+  rpm-build && \
+  dnf clean all
diff --git a/devtools/containers/Dockerfile.centos9 b/devtools/containers/Dockerfile.centos9
index 7faa9888..83ce989b 100644
--- a/devtools/containers/Dockerfile.centos9
+++ b/devtools/containers/Dockerfile.centos9
@@ -4,6 +4,7 @@ RUN \
   dnf -y update --nodocs --setopt=install_weak_deps=False && \
   dnf install -y --nodocs --setopt=install_weak_deps=False epel-release && \
   dnf install -y --nodocs --setopt=install_weak_deps=False --enablerepo crb \
+  git \
   gcc \
   glibc-langpack-en \
   krb5-devel \
diff --git a/devtools/containers/Dockerfile.f43 b/devtools/containers/Dockerfile.f43
new file mode 100644
index 00000000..e7fa7da9
--- /dev/null
+++ b/devtools/containers/Dockerfile.f43
@@ -0,0 +1,27 @@
+FROM registry.fedoraproject.org/fedora:42
+RUN \
+  dnf -y update --nodocs --setopt=install_weak_deps=False && \
+  dnf install -y --nodocs --setopt=install_weak_deps=False \
+  gcc \
+  git \
+  glibc-langpack-en \
+  krb5-devel \
+  python3-cffi \
+  python3-cheetah \
+  python3-dateutil \
+  python3-defusedxml \
+  python3-devel \
+  python3-dnf \
+  python3-jinja2 \
+  python3-librepo \
+  python3-multilib \
+  python3-pytest \
+  python3-requests \
+  python3-requests-gssapi \
+  python3-requests-mock \
+  python3-rpm \
+  python3-setuptools \
+  python3-six \
+  python3-tox \
+  rpm-build && \
+  dnf clean all
diff --git a/devtools/containers/Dockerfile.f44 b/devtools/containers/Dockerfile.f44
new file mode 100644
index 00000000..b9145c9f
--- /dev/null
+++ b/devtools/containers/Dockerfile.f44
@@ -0,0 +1,28 @@
+FROM registry.fedoraproject.org/fedora:44
+RUN \
+  dnf -y update --nodocs --setopt=install_weak_deps=False && \
+  dnf install -y --nodocs --setopt=install_weak_deps=False \
+  flake8 \
+  gcc \
+  git \
+  glibc-langpack-en \
+  krb5-devel \
+  python3-cffi \
+  python3-cheetah \
+  python3-dateutil \
+  python3-defusedxml \
+  python3-devel \
+  python3-dnf \
+  python3-jinja2 \
+  python3-librepo \
+  python3-multilib \
+  python3-pytest \
+  python3-requests \
+  python3-requests-gssapi \
+  python3-requests-mock \
+  python3-rpm \
+  python3-setuptools \
+  python3-six \
+  python3-tox \
+  rpm-build && \
+  dnf clean all
diff --git a/devtools/containers/Dockerfile.rawhide b/devtools/containers/Dockerfile.rawhide
index ee5fa763..5dc8a7c6 100644
--- a/devtools/containers/Dockerfile.rawhide
+++ b/devtools/containers/Dockerfile.rawhide
@@ -3,6 +3,7 @@ RUN \
   dnf -y update --nodocs --setopt=install_weak_deps=False && \
   dnf install -y --nodocs --setopt=install_weak_deps=False \
   gcc \
+  git \
   glibc-langpack-en \
   krb5-devel \
   python3-defusedxml \