diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 050195c..5747f86 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -13,6 +13,15 @@ on:
 
   workflow_dispatch:
 
+defaults:
+  run:
+    # This is the same as GitHub Action's `bash` keyword as of 14 May 2024:
+    # https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsshell
+    #
+    # Completely spelling it out here so that GitHub can't change it out from under us
+    # and we don't have to refer to the docs to know the expected behavior.
+    shell: bash --noprofile --norc -eo pipefail {0}
+
 jobs:
   generate-version:
     runs-on: ubuntu-22.04