diff --git a/mise.toml b/mise.toml
index e12c7553..ce9c63d0 100644
--- a/mise.toml
+++ b/mise.toml
@@ -87,7 +87,10 @@ alias = "check:jsonschema"
 [tasks."lint:actionlint"]
 run = "actionlint -color"
 alias = "check:actionlint"
-env = { "SHELLCHECK_OPTS" = "--enable=all" }
+# SC2312: check-extra-masked-returns
+# pipefail is set by shell: bash in GitHub Actions but cannot be detected by shellcheck
+# ref: https://docs.github.com/en/actions/writing-workflows/workflow-syntax-for-github-actions#defaultsrunshell
+env = { "SHELLCHECK_OPTS" = "--enable=all --exclude=SC2312" }
 
 [tasks."lint:ghalint"]
 run = "ghalint run"