diff --git a/.gitea/workflows/security.yml b/.gitea/workflows/security.yml
index d9cf2a1..6d5ea3f 100644
--- a/.gitea/workflows/security.yml
+++ b/.gitea/workflows/security.yml
@@ -56,6 +56,13 @@ jobs:
           chmod +x ./scripts/validate-test-db-target.sh
           bash ./scripts/validate-test-db-target.sh
 
+      - name: Apply Prisma schema to TEST_DATABASE_URL
+        env:
+          DATABASE_URL: ${{ secrets.TEST_DATABASE_URL }}
+        run: |
+          cd api
+          npx prisma migrate deploy
+
       - name: Run OWASP security suite (DB-backed)
         env:
           TEST_DATABASE_URL: ${{ secrets.TEST_DATABASE_URL }}