diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index a3137eb60..c181c1c92 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -16,6 +16,6 @@ updates:
       - "/package"
       - "/pkg/sass-parser"
     ignore:
-      dependency-name: "sass"
+      - dependency-name: "sass"
     schedule:
       interval: "weekly"
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 72a26521a..4ee23575b 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -307,10 +307,13 @@ jobs:
 
     - run: dart run grinder pkg-npm-dev
       env: {UPDATE_SASS_SASS_REPO: false}
+    - run: sudo chmod 4755 /opt/google/chrome/chrome-sandbox
     - name: Run tests
       run: dart run test -p chrome -j 2
       env:
         CHROME_EXECUTABLE: chrome
+        # See https://chromium.googlesource.com/chromium/src/+/main/docs/security/apparmor-userns-restrictions.md#option-3_the-safest-way
+        CHROME_DEVEL_SANDBOX: /opt/google/chrome/chrome-sandbox
 
   sass_parser_tests:
     name: "sass-parser Tests | Dart ${{ matrix.dart_channel }} | Node ${{ matrix.node-version }}"