diff --git a/.github/workflows/static_analysis.yml b/.github/workflows/static_analysis.yml
index c6e7ce7..c6e27e1 100644
--- a/.github/workflows/static_analysis.yml
+++ b/.github/workflows/static_analysis.yml
@@ -60,6 +60,8 @@ jobs:
       # Every finding goes to the job summary; a new one at warning or error level fails the job.
       - name: Summarize the findings
         run: |
+          # The default shell has no pipefail, and without it tee would hide the summary's exit code.
+          set -o pipefail
           base=()
           if [ -f "$RUNNER_TEMP/clang-tidy-base.sarif" ]; then
             base=(--base "$RUNNER_TEMP/clang-tidy-base.sarif" --base-root "$RUNNER_TEMP/base")