diff --git a/.gitea/workflows/sonarqube.yml b/.gitea/workflows/sonarqube.yml
index 5d0cde7..b7c536d 100644
--- a/.gitea/workflows/sonarqube.yml
+++ b/.gitea/workflows/sonarqube.yml
@@ -51,6 +51,7 @@ jobs:
         run: infer run --compilation-database build-toolmode/Debug/compile_commands.json
 
       - name: Generate coverage report
+        shell: bash
         run: |
             # gcovr's own LLVM-JSON reader only understands coverage-mapping format
             # 2.x; this image's clang 22 llvm-cov emits format 3.x, which gcovr