diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d1b1fad..5855f45 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -9,12 +9,20 @@ jobs:
   checks:
     name: Run checks
     if: ${{ github.event_name != 'pull_request' || github.repository != github.event.pull_request.head.repo.full_name }}
-    runs-on: ubuntu-latest
+    runs-on: namespace-profile-linux-default
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v7
+        uses: namespacelabs/nscloud-checkout-action@v9
+      - name: Setup Node
+        uses: actions/setup-node@v7
+        with:
+          node-version: 24
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2
+      - name: Set up cache
+        uses: namespacelabs/nscloud-cache-action@v1
+        with:
+          cache: "bun"
       - name: Install dependencies
         run: bun install
       - name: Check formatting
diff --git a/README.md b/README.md
index 15c6e37..95bb75d 100644
--- a/README.md
+++ b/README.md
@@ -65,3 +65,5 @@ bun run deploy
 ```
 
 Configure Cloudflare Access separately for the actual hostname used by the deployment. Protect the entire hostname, including `/api/*` and the Managed OAuth discovery endpoints. If both a `workers.dev` hostname and a custom hostname are reachable, protect both or disable the unused hostname.
+
+<img src="https://papermc.io/assets/misc/namespace-oss-badge.svg?project=patch-roulette" alt="CI powered by namespace badge" />