diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 3dcb0414d..b8854f8ce 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -92,10 +92,15 @@ jobs:
     if: needs.changes.outputs.helm == 'true'
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
+      - uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          version: "v3.19.2"
       - uses: bmuschko/setup-kubeconform@e5d264ec1eafe2314e750c429a9da7639dd5a003 # v1.1.0
         with:
           kubeconform-version: "0.8.0"
-      - run: kubeconform ci/helm-chart
+      - run: helm template ci/helm-chart | kubeconform -strict -summary -
+        shell: bash # Setting shell:bash makes GitHub add `-o pipefail`.
 
   lint-ts:
     name: Lint TypeScript files