diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 255555d4..71f75d8b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -470,6 +470,7 @@ jobs:
         env:
           RELEASE_TAG: ${{ needs.release-please.outputs.tag_name }}
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        shell: bash # matrix includes windows-latest, where run: defaults to pwsh
         run: |
           set -euo pipefail
           scripts/resolve-release-tag.sh "$RELEASE_TAG"
diff --git a/scripts/test-resolve-release-tag.sh b/scripts/test-resolve-release-tag.sh
index 1b8d956f..d50706a7 100755
--- a/scripts/test-resolve-release-tag.sh
+++ b/scripts/test-resolve-release-tag.sh
@@ -341,6 +341,7 @@ job=release-binaries
         env:
           RELEASE_TAG: ${{ needs.release-please.outputs.tag_name }}
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        shell: bash # matrix includes windows-latest, where run: defaults to pwsh
         run: |
           set -euo pipefail
           scripts/resolve-release-tag.sh "$RELEASE_TAG"