diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index b68c792242..cb8a3a9097 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -48,10 +48,11 @@ jobs:
             package: deb
 
           - version: ubuntu2204
-            container: andywick/arkime-build-22:5.0.0-2
+            container: andywick/arkime-build-22:5.0.0-4
             buildopt: "--nothirdparty --kafka --pfring"
             fpmdeps: "-d libwww-perl -d libjson-perl -d ethtool -d libyaml-dev -d liblua5.4-0 -d libmaxminddb0 -d libcurl4 -d libpcap0.8 -d libglib2.0-0 -d libnghttp2-14 -d libyara8 -d librdkafka1"
             package: deb
+            sanitize: true
 
           - version: ubuntu2404
             container: andywick/arkime-build-24:5.0.0-3
@@ -190,6 +191,12 @@ jobs:
           mv moloch*.deb moloch-main_${{matrix.version}}_amd64.deb
           ls -l *.deb
 
+      - name: sanitize
+        if: ${{ matrix.sanitize }}
+        run: |
+          (cd capture ; make sanitize CC=clang-18)
+          (cd tests; ./tests.pl)
+
       - name: upload github
         if: github.event_name == 'push' && github.ref == 'refs/heads/main'
         uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1