diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index ae49c71..5a56eab 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -9,11 +9,14 @@ on:
 
 jobs:
     test:
-        runs-on: ubuntu-latest
+        runs-on: docker
+        container:
+            image: ghcr.io/catthehacker/ubuntu:runner-latest
         steps:
             - uses: actions/checkout@v4
             - uses: actions/setup-node@v4
-            - uses: bahmutov/npm-install@v1
+            - run: npm install
+            - run: sudo apt update && sudo apt install -y maven
             - run: npm run build-keycloak-theme
 
     check_if_version_upgraded:
@@ -27,7 +30,7 @@ jobs:
             is_upgraded_version: ${{ steps.step1.outputs.is_upgraded_version }}
             is_pre_release: ${{steps.step1.outputs.is_pre_release }}
         steps:
-            - uses: garronej/ts-ci@v2.1.5
+            - uses: guardianproject.dev/actions/ts-ci@v2.1.5
               id: step1
               with:
                   action_name: is_package_json_version_upgraded
@@ -40,7 +43,8 @@ jobs:
         steps:
             - uses: actions/checkout@v4
             - uses: actions/setup-node@v4
-            - uses: bahmutov/npm-install@v1
+            - run: npm install
+            - run: sudo apt update && sudo apt install -y maven
             - run: npm run build-keycloak-theme
             - uses: softprops/action-gh-release@v2
               with:
diff --git a/flake.nix b/flake.nix
new file mode 100644
index 0000000..e69de29