diff --git a/.github/actions/run-backend-tests/action.yml b/.github/actions/run-backend-tests/action.yml
index 2a591366f5826..5b53f2eb4a5ec 100644
--- a/.github/actions/run-backend-tests/action.yml
+++ b/.github/actions/run-backend-tests/action.yml
@@ -52,8 +52,7 @@ runs:
         - name: Install SAML (python3-saml) dependencies
           shell: bash
           run: |
-              apt update
-              apt install libxml2-dev libxmlsec1-dev libxmlsec1-openssl
+              sudo apt-get update && sudo apt-get install libxml2-dev libxmlsec1-dev libxmlsec1-openssl
 
         - uses: syphar/restore-virtualenv@v1
           id: cache-backend-tests
@@ -74,7 +73,7 @@ runs:
           # This is not cached currently, as it's important to build the current HEAD version (we can't just look at
           # requirements.txt, which only has the published version) and caching just one package is not worth the effort
           run: |
-              apt install libboost-all-dev unzip cmake curl uuid pkg-config
+              sudo apt-get install libboost-all-dev unzip cmake curl uuid pkg-config
               curl https://www.antlr.org/download/antlr4-cpp-runtime-4.13.1-source.zip --output antlr4-source.zip
               unzip antlr4-source.zip -d antlr4-source && cd antlr4-source
               cmake .
diff --git a/.github/workflows/storybook-chromatic.yml b/.github/workflows/storybook-chromatic.yml
index 19b153aa0bfda..e4c89d3e112c4 100644
--- a/.github/workflows/storybook-chromatic.yml
+++ b/.github/workflows/storybook-chromatic.yml
@@ -164,7 +164,7 @@ jobs:
                   # If added or modified, run OptiPNG
                   if [ $ADDED -gt 0 ] || [ $MODIFIED -gt 0 ]; then
                     echo "Snapshots updated ($ADDED new, $MODIFIED changed), running OptiPNG"
-                    apt update && apt install -y optipng
+                    sudo apt-get update && sudo apt-get install -y optipng
                     optipng -clobber -o4 -strip all
                     
                     # we don't want to _always_ run OptiPNG