diff --git a/.github/workflows/compile-mermaid.yml b/.github/workflows/compile-mermaid.yml
index e0b17a45..0dea1a45 100644
--- a/.github/workflows/compile-mermaid.yml
+++ b/.github/workflows/compile-mermaid.yml
@@ -64,7 +64,8 @@ jobs:
           )
           # This will overwrite any PNG files with the same name that have been created by run-tests.sh
           # v0.5.0 is the last version to correctly convert our SVG files to PNG
-          npx --yes convert-svg-to-png@0.5.0 "${svg_files_to_convert[@]}"
+          # We use aa-exec since `convert-svg-to-png` uses puppeteer, which AppArmor blocks in Ubuntu 24.04
+          aa-exec --profile=chrome npx --yes convert-svg-to-png@0.5.0 "${svg_files_to_convert[@]}"
 
       - name: Upload diagrams for manual inspection
         # also uploads for `upload-percy.yml` action
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 454b0a66..8bdf5a46 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -21,5 +21,7 @@ jobs:
           cache: 'npm'
       # throws an error if package-lock.json is out-of-date
       - run: npm ci
-      # runs jest unittests
-      - run: npm test
+      # We use aa-exec since Ubuntu 24.04's AppArmor profile blocks the use
+      # of puppeteer otherwise, see
+      # https://github.com/puppeteer/puppeteer/issues/12818
+      - run: aa-exec --profile=chrome npm test