diff --git a/tox.ini b/tox.ini
index 8b57fffc09..67931b73fc 100644
--- a/tox.ini
+++ b/tox.ini
@@ -365,6 +365,7 @@ envlist =
     docs
     generate
     generate_workflows
+    shellcheck
 
 [testenv]
 deps =
@@ -374,7 +375,9 @@ deps =
 
   ; FIXME: add coverage testing
   ; FIXME: add mypy testing
-allowlist_externals = sh
+allowlist_externals =
+  sh
+  sudo
 
 setenv =
   ; override CORE_REPO_SHA via env variable when testing other branches/commits than main