diff --git a/.github/workflows/bolt-test.yaml b/.github/workflows/bolt-test.yaml
index 4ba7014e5..f5b5d14c5 100644
--- a/.github/workflows/bolt-test.yaml
+++ b/.github/workflows/bolt-test.yaml
@@ -37,6 +37,10 @@ jobs:
       - name: Bolt Test
         run: nix-shell --pure --run "bolt test"
 
+      - name: Tmate
+        if: failure()
+        uses: mxschmitt/action-tmate@v3
+
       - name: K3D Cleanup
         if: always()
         run: nix-shell --pure --run "k3d cluster delete rivet-ci"
diff --git a/svc/api/traefik-provider/tests/basic.rs b/svc/api/traefik-provider/tests/basic.rs
index 6ca1309f9..e230978cd 100644
--- a/svc/api/traefik-provider/tests/basic.rs
+++ b/svc/api/traefik-provider/tests/basic.rs
@@ -303,8 +303,7 @@ async fn job_run() {
 }
 
 mod cdn_suite {
-
-	use super::Ctx;
+	use super::{Ctx, CDN_SLEEP_DURATION};
 	use proto::backend::{self, cdn::*, pkg::*};
 	use rivet_operation::prelude::*;
 
@@ -369,6 +368,8 @@ mod cdn_suite {
 		.await
 		.unwrap();
 
+		tokio::time::sleep(CDN_SLEEP_DURATION).await;
+
 		// Test HTML
 		{
 			let res = test_cdn_path(&version, "/index.html", |req| {
diff --git a/svc/pkg/user/ops/resolve-access-token/tests/integration.rs b/svc/pkg/user/ops/resolve-access-token/tests/integration.rs
index 532805b00..1f1ac9dc5 100644
--- a/svc/pkg/user/ops/resolve-access-token/tests/integration.rs
+++ b/svc/pkg/user/ops/resolve-access-token/tests/integration.rs
@@ -9,7 +9,7 @@ async fn empty(ctx: TestCtx) {
 	.await
 	.unwrap();
 
-	let name = "foo".to_string();
+	let name = util::faker::ident();
 	op!([ctx] user_identity_create {
 		user_id: user_res.user_id,
 		identity: Some(backend::user_identity::Identity {