diff --git a/.gitea/workflows/ci-cd.yml b/.gitea/workflows/ci-cd.yml
index 421d63385..d915f7f52 100755
--- a/.gitea/workflows/ci-cd.yml
+++ b/.gitea/workflows/ci-cd.yml
@@ -129,6 +129,10 @@ jobs:
         bash -n scripts/init_production_env.sh
 
         '
+    - name: Start PostgreSQL for validate (isolated container)
+      shell: sh
+      run: "set -eu\nPG_CONTAINER=\"ci-pg-validate-${GITHUB_RUN_ID:-$$}\"\necho \"PG_CONTAINER=$PG_CONTAINER\" >> \"$GITHUB_ENV\"\ndocker rm -f \"$PG_CONTAINER\" 2>/dev/null || true\ndocker run -d --name \"$PG_CONTAINER\" \\\n  --shm-size=256m \\\n  -e POSTGRES_USER=postgres \\\n  -e POSTGRES_PASSWORD=postgres \\\n  -e POSTGRES_DB=xiaoxia_saas \\\n  -P \\\n  --health-cmd \"pg_isready -U postgres\" \\\n  --health-interval 3s \\\n  --health-timeout 3s \\\n  --health-retries 20 \\\n  postgres:16-alpine\nPG_PORT=$(docker port \"$PG_CONTAINER\" 5432/tcp | cut -d: -f2)\necho \"PostgreSQL port: $PG_PORT\"\necho \"DATABASE_URL=postgresql+psycopg://postgres:postgres@127.0.0.1:$PG_PORT/xiaoxia_saas\" >> \"$GITHUB_ENV\"\nfor i in $(seq 1 30); do\n  if docker inspect --format='{{.State.Health.Status}}' \"$PG_CONTAINER\" 2>/dev/null | grep -q healthy; then\n    echo \"PostgreSQL is ready on port $PG_PORT\"\n    break\n  fi\n  echo \"Waiting for PostgreSQL... ($i/30)\"\n  sleep 2\ndone\ndocker inspect --format='{{.State.Health.Status}}' \"$PG_CONTAINER\" | grep -q healthy\n"
+
     - name: Validate Alembic migrations
       shell: sh
       run: 'set -eu
@@ -147,6 +151,14 @@ jobs:
       env:
         GITHUB_TOKEN: ${{ github.token }}
       run: "set -eu\npython3 scripts/check_migration_safety.py --allow-medium-risk --diff-against origin/develop\n"
+    - name: Cleanup PostgreSQL (validate)
+      if: always()
+      shell: sh
+      run: 'set +e
+        docker rm -f "${PG_CONTAINER:-ci-pg-validate}" 2>/dev/null || true
+        echo "PostgreSQL container cleaned up"
+        '
+
     - name: Job duration summary
       if: always()
       shell: sh