diff --git a/tests/integration/test_astrolabe_multi_user_background_sync.py b/tests/integration/test_astrolabe_multi_user_background_sync.py
index 8521aa74..1fafcfdf 100644
--- a/tests/integration/test_astrolabe_multi_user_background_sync.py
+++ b/tests/integration/test_astrolabe_multi_user_background_sync.py
@@ -19,6 +19,7 @@ password minted + forwarded to MCP → background sync active → DB verificatio
 
 import logging
 import subprocess
+import tempfile
 
 import anyio
 import pytest
@@ -129,7 +130,9 @@ async def enable_background_sync(page: Page, username: str) -> bool:
         logger.info("✓ Background indexing enabled for %s", username)
         return True
     except Exception:
-        screenshot_path = f"/tmp/astrolabe_enable_failed_{username}.png"  # NOSONAR: test debug artifact, matches this file's convention
+        screenshot_path = (
+            f"{tempfile.gettempdir()}/astrolabe_enable_failed_{username}.png"
+        )
         await page.screenshot(path=screenshot_path)
         raise ValueError(
             f"Background indexing did not enable for {username}. "
diff --git a/tests/unit/test_login_flow.py b/tests/unit/test_login_flow.py
index e4bcc7d2..c1c34377 100644
--- a/tests/unit/test_login_flow.py
+++ b/tests/unit/test_login_flow.py
@@ -169,7 +169,7 @@ async def test_initiate_rewrites_login_url_to_public_host():
             "login": "https://nc-internal.test/login/v2/flow/tok123",
             "poll": {
                 "endpoint": "https://nc-internal.test/login/v2/poll",
-                "token": "secret-poll-token",  # NOSONAR: test fixture, not a real secret
+                "token": "tok",  # value irrelevant here; this test asserts the URLs
             },
         },
     )