diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 523329ef..5a9b3c96 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -70,6 +70,26 @@ jobs:
       - name: Build final image
         run: docker build -t final-image .
 
+  verify-tools:
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: actions/setup-go@v6
+        with:
+          go-version-file: ./devrun/go.mod
+      - run: go test ./...
+        working-directory: ./devrun
+
+      - uses: actions/setup-go@v6
+        with:
+          go-version-file: ./ci/go.mod
+      - run: go test ./...
+        working-directory: ./ci
+
   verify-private:
     if: |
       github.repository == 'qdm12/gluetun' &&
diff --git a/devrun/internal/credentials_test.go b/devrun/internal/credentials_test.go
index c9471c08..006e4a44 100644
--- a/devrun/internal/credentials_test.go
+++ b/devrun/internal/credentials_test.go
@@ -262,12 +262,19 @@ func Test_formatCredentialForDump(t *testing.T) {
 			provider: "protonvpn",
 			vpnType:  vpnTypeOpenVPN,
 			providerCredentials: providerCredentials{
-				OpenVPN: &openvpnCredentials{Username: "user", Password: "pass"},
+				OpenVPN: &openvpnCredentials{
+					Username: "user",
+					Password: "pass",
+					Key:      "key",
+					Cert:     "cert",
+				},
 			},
 			expectedOutput: "provider: protonvpn\n" +
 				"vpn_type: openvpn\n" +
 				"username: user\n" +
-				"password: pass",
+				"password: pass\n" +
+				"key: key\n" +
+				"cert: cert\n",
 		},
 		"wireguard": {
 			provider: "mullvad",