From 6d4fcee73346ace3189680af708e7bd57c09252c Mon Sep 17 00:00:00 2001
From: Julien Carsique <julien.carsique@sonarsource.com>
Date: Mon, 13 Apr 2026 11:01:15 +0200
Subject: [PATCH] PREQ-5138 authenticate NPM (#230)

---
 .github/workflows/unit-tests.yml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/unit-tests.yml b/.github/workflows/unit-tests.yml
index 1511ed9..5ed001e 100644
--- a/.github/workflows/unit-tests.yml
+++ b/.github/workflows/unit-tests.yml
@@ -7,7 +7,10 @@ on:
 
 jobs:
   test:
-    runs-on: ubuntu-latest
+    runs-on: github-ubuntu-latest-s
+    permissions:
+      id-token: write
+      contents: read
 
     steps:
       - uses: actions/checkout@v5
@@ -18,6 +21,9 @@ jobs:
           node-version: "24"
           cache: "npm"
 
+      - name: Configure NPM with Repox
+        uses: SonarSource/ci-github-actions/config-npm@v1
+
       - name: Install dependencies
         run: npm ci