diff --git a/.github/workflows/pytest.yml b/.github/workflows/pytest.yml
index 0a26ce6..063a3f5 100644
--- a/.github/workflows/pytest.yml
+++ b/.github/workflows/pytest.yml
@@ -16,4 +16,4 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - name: Run tests
-        run: nix develop .#devShells.x86_64-linux.default -c unshare --map-root-user --user --net -- pytest tests
+        run: nix develop .#devShells.x86_64-linux.default -c pytest tests
diff --git a/.github/workflows/pytest_safe.yml b/.github/workflows/pytest_safe.yml
new file mode 100644
index 0000000..85e40f9
--- /dev/null
+++ b/.github/workflows/pytest_safe.yml
@@ -0,0 +1,19 @@
+name: pytest_safe
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+  merge_group:
+
+jobs:
+  pytest:
+    runs-on: self-hosted
+
+    steps:
+      - uses: actions/checkout@v4
+      - name: Run tests
+        run: unshare --map-root-user --user --net -- pytest tests