diff --git a/service/hugo/Containerfile b/service/hugo/Containerfile
index 1ece2c1..781e709 100644
--- a/service/hugo/Containerfile
+++ b/service/hugo/Containerfile
@@ -1,8 +1,11 @@
 FROM docker.io/debian:bookworm-slim@sha256:f80c45482c8d147da87613cb6878a7238b8642bcc24fc11bad78c7bec726f340 AS builder-hugo
 ARG VERSION=0.121.1 # renovate: datasource=github-releases depName=gohugoio/hugo extractVersion=^v(?<version>.*)$
 
-ADD https://github.com/gohugoio/hugo/releases/download/v${VERSION}/hugo_${VERSION}_Linux-64bit.tar.gz /src/hugo
-RUN install -D --mode 0755 /src/hugo /build/usr/bin/hugo
+WORKDIR /src
+
+ADD https://github.com/gohugoio/hugo/releases/download/v${VERSION}/hugo_${VERSION}_Linux-64bit.tar.gz /src.tar.gz
+RUN tar --no-same-owner -xvzf /src.tar.gz && \
+    install -D --mode 0755 /src/hugo /build/usr/bin/hugo
 
 FROM docker.io/golang:1.21-bookworm@sha256:1415bb0b25d3bffc0a44dcf9851c20a9f8bbe558095221d931f2e4a4cc3596eb AS builder-webhook
 ARG VERSION=2.8.1 # renovate: datasource=github-releases depName=adnanh/webhook