diff --git a/.github/workflows/static-checks-pr.yml b/.github/workflows/static-checks-pr.yml
index 2034403d945..61fb34cf7b3 100644
--- a/.github/workflows/static-checks-pr.yml
+++ b/.github/workflows/static-checks-pr.yml
@@ -29,6 +29,6 @@ jobs:
 
       - name: Run static checks
         run: |
-          pip install tox
+          pip install tox==v4.0.8
           tox -c tests/static -- ${{ github.base_ref }} ${{ github.sha }}
 ...
diff --git a/tests/static/tox.ini b/tests/static/tox.ini
index b056042afbc..c4ea575c174 100644
--- a/tests/static/tox.ini
+++ b/tests/static/tox.ini
@@ -11,6 +11,7 @@ skip_missing_interpreters=True
 [testenv]
 skip_install=True
 setenv = TOX_ANSIBLE_INV_PATH = {toxinidir}/tox-inventory.txt
+allowlist_externals = */agnosticd/tests/static/syntax-check.sh
 deps =
     #-r{toxinidir}/requirements.txt
     -r{toxinidir}/test-requirements.txt