diff --git a/.github/workflows/coverity-scan.yml b/.github/workflows/coverity-scan.yml
index 9946ea9059..84c562899f 100644
--- a/.github/workflows/coverity-scan.yml
+++ b/.github/workflows/coverity-scan.yml
@@ -35,7 +35,7 @@ jobs:
             libssl-dev \
             python3 \
             python3-dev \
-            python3-pip\
+            python3-pip \
             swig \
             zlib1g-dev \
             libkrb5-dev \
@@ -43,10 +43,12 @@ jobs:
             sqlite3 \
             curl \
             wget
-          # Many distros adhere to PEP 394's recommendation for `python` =
-          # `python2` so this is a simple workaround until we drop Python 2
-          # support and explicitly use `python3` for all invocations.
-          sudo ln -sf /usr/bin/python3 /usr/local/bin/python
+
+      - name: Install CAF
+        run: ( cd auxil/broker/caf && ./configure --prefix=`pwd`/build/install-root && cd build && make -j 3 install )
+
+      - name: Configure
+        run: ./configure --build-type=debug --with-caf=`pwd`/auxil/broker/caf/build/install-root
 
       - name: Fetch Coverity Tools
         env:
@@ -60,9 +62,6 @@ jobs:
           rm coverity_tool.tgz
           mv cov-analysis* coverity-tools
 
-      - name: Configure
-        run: ./configure --build-type=debug
-
       - name: Build
         run: |
           export PATH=`pwd`/coverity-tools/bin:$PATH