diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index d89b2de..487dabb 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -148,10 +148,11 @@ jobs:
         run: |
           src=$(/usr/bin/curl -Lfs https://raw.githubusercontent.com/acidanthera/ocbuild/master/ci-bootstrap.sh) && eval "$src" || exit 1
       - uses: actions/checkout@v2
+      - run: ./unixbuild.sh --configure
       - name: Run Coverity
         run: |
           src=$(/usr/bin/curl -Lfs https://raw.githubusercontent.com/acidanthera/ocbuild/master/coverity/covstrap.sh) && eval "$src" || exit 1
         env:
           COVERITY_SCAN_TOKEN: ${{ secrets.COVERITY_SCAN_TOKEN }}
           COVERITY_SCAN_EMAIL: ${{ secrets.COVERITY_SCAN_EMAIL }}
-          COVERITY_BUILD_COMMAND: ./unixbuild.sh
+          COVERITY_BUILD_COMMAND: ./unixbuild.sh --build
diff --git a/unixbuild.sh b/unixbuild.sh
index a8308b7..f86af15 100755
--- a/unixbuild.sh
+++ b/unixbuild.sh
@@ -123,7 +123,10 @@ rm -rf dist
 mkdir -p dist || exit 1
 
 build_tool UEFITool    "$UEFITOOL_VER"  uefitool.pro
-build_tool UEFIExtract "$UEFITOOL_VER"  ""
-build_tool UEFIFind    "$UEFITOOL_VER"  ""
+# FIXME: cmake does not let overriding CC after generating files.
+if [ "$COVERITY_SCAN_TOKEN" = "" ]; then
+  build_tool UEFIExtract "$UEFITOOL_VER"  ""
+  build_tool UEFIFind    "$UEFITOOL_VER"  ""
+fi
 
 exit 0