diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 4be3a0a1..24c00622 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -86,6 +86,7 @@ jobs:
       fail-fast: false
       matrix:
         bazel_version: [6.5.0, 7.1.0]
+        sandbox: [true, false]
         xcode_version: [15.2]
     env:
         XCODE_VERSION: ${{ matrix.xcode_version }}
@@ -94,6 +95,10 @@ jobs:
       - uses: actions/checkout@v4
       - name: Preflight Env
         run: .github/workflows/preflight_env.sh
+      - if: matrix.sandbox
+        name: Enable sandbox mode
+        run: |
+          echo "build --config=sandboxed" >> user.bazelrcc
       - name: Build and Test
         run: |
           bazelisk build \