diff --git a/.github/workflows/coverity.yml b/.github/workflows/coverity.yml
index 5c42412..d958d9c 100644
--- a/.github/workflows/coverity.yml
+++ b/.github/workflows/coverity.yml
@@ -12,9 +12,11 @@ jobs:
         run: sudo apt-get update --fix-missing -y
       - name: install prerequisites
         run: sudo apt-get install -y zlib1g-dev
+      - name: Download current Entrust root cert chain...
+        run: wget -q https://abnf.msweet.org/entrust.epm -O entrust.pem
       - name: Download Coverity Build Tool
         run: |
-          wget -q --no-check-certificate https://scan.coverity.com/download/linux64 --post-data token="$TOKEN&project=$GITHUB_REPOSITORY" -O cov-analysis-linux64.tar.gz
+          wget -q --ca-certificate=entrust.pem https://scan.coverity.com/download/linux64 --post-data token="$TOKEN&project=$GITHUB_REPOSITORY" -O cov-analysis-linux64.tar.gz
           mkdir cov-analysis-linux64
           tar xzf cov-analysis-linux64.tar.gz --strip 1 -C cov-analysis-linux64
         env:
@@ -28,7 +30,7 @@ jobs:
         run: |
           tar czvf cov.tgz cov-int
           curl \
-            --insecure \
+            --cacert entrust.pem \
             --form token=$TOKEN \
             --form email=michael.r.sweet@gmail.com \
             --form file=@cov.tgz \