diff --git a/.github/workflows/unit-tests.yml b/.github/workflows/unit-tests.yml
index 1511ed9..5ed001e 100644
--- a/.github/workflows/unit-tests.yml
+++ b/.github/workflows/unit-tests.yml
@@ -7,7 +7,10 @@ on:
 
 jobs:
   test:
-    runs-on: ubuntu-latest
+    runs-on: github-ubuntu-latest-s
+    permissions:
+      id-token: write
+      contents: read
 
     steps:
       - uses: actions/checkout@v5
@@ -18,6 +21,9 @@ jobs:
           node-version: "24"
           cache: "npm"
 
+      - name: Configure NPM with Repox
+        uses: SonarSource/ci-github-actions/config-npm@v1
+
       - name: Install dependencies
         run: npm ci