diff --git a/.gitea/workflows/sonarqube.yml b/.gitea/workflows/sonarqube.yml
index b7c536d..2f481ea 100644
--- a/.gitea/workflows/sonarqube.yml
+++ b/.gitea/workflows/sonarqube.yml
@@ -62,10 +62,10 @@ jobs:
             BINARIES=($(find build-toolmode/Debug -maxdepth 8 -type f -executable -iname "*Tests"))
             OBJECT_ARGS=$(printf -- '-object %s ' "${BINARIES[@]:1}")
             llvm-cov export -format=lcov -instr-profile=merged.profdata "${BINARIES[0]}" $OBJECT_ARGS > coverage.lcov
-            # lcov_cobertura isn't preinstalled on the image; reuse gcovr's own
-            # pipx-managed venv (which already has a working pip) to fetch it.
-            pipx runpip gcovr install lcov_cobertura
-            /root/.local/share/pipx/venvs/gcovr/bin/lcov_cobertura coverage.lcov -b . -o coverage.xml
+            # lcov_cobertura isn't preinstalled on the image; inject it into
+            # gcovr's existing pipx venv and expose its CLI on PATH.
+            pipx inject gcovr lcov_cobertura --include-apps
+            lcov_cobertura coverage.lcov -b . -o coverage.xml
 
       - name: SonarQube Scan
         uses: SonarSource/sonarqube-scan-action@v7.0.0