diff --git a/tox.ini b/tox.ini
index c94172bbd..101f676d1 100644
--- a/tox.ini
+++ b/tox.ini
@@ -27,6 +27,8 @@ commands =
   bash -c "set -e; for config in $(ls conf/); do \
     echo conf/$config; pykwalify -d conf/$config -s browbeat/schema/browbeat.yml; done"
   {[testenv:dist]commands}
+allowlist_externals =
+  bash
 
 [testenv:dist]
 basepython = python3
@@ -80,6 +82,8 @@ commands =
 
 [testenv:molecule]
 commands = {toxinidir}/ci-scripts/molecule/test-molecule.sh
+allowlist_externals =
+  {toxinidir}/ci-scripts/molecule/test-molecule.sh
 
 [flake8]
 # E123, E125 skipped as they are invalid PEP-8.