diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index dcf80b2..db93296 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,7 +17,6 @@ jobs:
           cache: 'npm'
       - run: npm ci
       - run: npm test -- --coverage
-      - run: npx eslint src/ index.js functions.js __tests__/
       - name: Security audit
         run: npm audit --audit-level=moderate || true
       - name: Upload coverage
@@ -27,7 +26,18 @@ jobs:
           name: coverage
           path: coverage/
 
-  bazel:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'npm'
+      - run: npm ci
+      - run: npx eslint src/ index.js functions.js __tests__/
+
+  ci:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -41,7 +51,7 @@ jobs:
 
   sbom:
     runs-on: ubuntu-latest
-    needs: test
+    needs: [test, lint]
     if: github.ref == 'refs/heads/main'
     permissions:
       contents: read
@@ -64,7 +74,7 @@ jobs:
 
   provenance:
     runs-on: ubuntu-latest
-    needs: test
+    needs: [test, lint]
     if: github.ref == 'refs/heads/main'
     permissions:
       contents: read