diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e780c71..3fca037 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -44,10 +44,14 @@ jobs:
           pip install -r requirements/runtime.txt
           pip install pytest
 
+      - name: Normalize local tooling permissions
+        run: |
+          chmod +x bin/azazel-edge-* || true
+
       - name: Run tests
         run: |
           . .venv/bin/activate
-          PYTHONPATH=. pytest -q
+          PYTHONPATH=.:py pytest -q
 
   test-rust:
     name: Rust tests
@@ -65,6 +69,8 @@ jobs:
     if: github.event_name == 'pull_request' && vars.ENABLE_DEPENDENCY_REVIEW == 'true'
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/checkout@v4
+
       - name: Review dependency changes
         uses: actions/dependency-review-action@v4
         with: