From 69186b2b3bd1c57233a25166d5c6b4c3e3f6156c Mon Sep 17 00:00:00 2001
From: Julien Carsique <julien.carsique@sonarsource.com>
Date: Fri, 10 Apr 2026 17:48:22 +0200
Subject: [PATCH] PREQ-5138 authenticate NPM

---
 .github/workflows/unit-tests.yml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/unit-tests.yml b/.github/workflows/unit-tests.yml
index 1511ed9..ec61c07 100644
--- a/.github/workflows/unit-tests.yml
+++ b/.github/workflows/unit-tests.yml
@@ -7,7 +7,10 @@ on:
 
 jobs:
   test:
-    runs-on: ubuntu-latest
+    runs-on: github-ubuntu-latest-s
+    permissions:
+      id-token: write
+      contents: write
 
     steps:
       - uses: actions/checkout@v5
@@ -18,6 +21,9 @@ jobs:
           node-version: "24"
           cache: "npm"
 
+      - name: Configure NPM with Repox
+        uses: SonarSource/ci-github-actions/config-npm@v1
+
       - name: Install dependencies
         run: npm ci