diff --git a/tox.ini b/tox.ini
index a82d5fd9cb..478516d240 100644
--- a/tox.ini
+++ b/tox.ini
@@ -367,6 +367,7 @@ envlist =
     docs
     generate
     generate_workflows
+    shellcheck
 
 [testenv]
 deps =
@@ -376,7 +377,9 @@ deps =
 
   ; FIXME: add coverage testing
   ; FIXME: add mypy testing
-allowlist_externals = sh
+allowlist_externals =
+  sh
+  sudo
 
 setenv =
   ; override CORE_REPO_SHA via env variable when testing other branches/commits than main