diff --git a/.github/scripts/Linux/arm/bootstrap.sh b/.github/scripts/Linux/arm/bootstrap.sh
index d7b9999b4..7518ea669 100755
--- a/.github/scripts/Linux/arm/bootstrap.sh
+++ b/.github/scripts/Linux/arm/bootstrap.sh
@@ -13,7 +13,7 @@ deb http://security.debian.org/debian-security $debver-security main contrib non
 deb http://deb.debian.org/debian $debver-updates main contrib non-free
 EOF
 fi
-curl http://archive.raspberrypi.org/debian/raspberrypi.gpg.key -o \
+curl -f http://archive.raspberrypi.org/debian/raspberrypi.gpg.key -o \
         /usr/share/keyrings/raspberrypi.gpg.key
 cat >>/etc/apt/sources.list <<EOF
 deb [signed-by=/usr/share/keyrings/raspberrypi.gpg.key] \
@@ -43,11 +43,11 @@ mkai_arch=$(dpkg --print-architecture)
 if [ "$mkai_arch" = arm64 ]; then
         mkai_arch=aarch64
 fi
-mkai_url=$(curl -H "Authorization: token $GITHUB_TOKEN"\
+mkai_url=$(curl -f -H "Authorization: token $GITHUB_TOKEN"\
  https://api.github.com/repos/probonopd/go-appimage/releases/tags/continuous |
  grep "browser_download_url.*mkappimage-.*-$mkai_arch.AppImage" | head -n 1 |
  cut -d '"' -f 4)
-curl -L "$mkai_url" > mkappimage
+curl -Lf "$mkai_url" > mkappimage
 chmod 755 mkappimage
 #shellcheck disable=SC2211
 /usr/bin/qemu-*-static ./mkappimage --appimage-extract
diff --git a/.github/workflows/arm-build.yml b/.github/workflows/arm-build.yml
index c7bb469a8..9f5269306 100644
--- a/.github/workflows/arm-build.yml
+++ b/.github/workflows/arm-build.yml
@@ -50,7 +50,8 @@ jobs:
         key: cache-ndi-${{ runner.os }}-${{ steps.etags.outputs.ndi }}
     - name: Download NDI
       if: steps.cache-ndi.outputs.cache-hit != 'true'
-      run: curl -L https://downloads.ndi.tv/SDK/NDI_SDK_Linux/Install_NDI_SDK_v5_Linux.tar.gz -o /var/tmp/Install_NDI_SDK_Linux.tar.gz
+      run: "curl -Lf https://downloads.ndi.tv/SDK/NDI_SDK_Linux/\
+       Install_NDI_SDK_v5_Linux.tar.gz -o /var/tmp/Install_NDI_SDK_Linux.tar.gz"
 
     - name: Run actions/cache for ARM Chroot
       id: cache-bootstrap
diff --git a/.github/workflows/coverity-scan.yml b/.github/workflows/coverity-scan.yml
index 3df15e75c..faff1aa75 100644
--- a/.github/workflows/coverity-scan.yml
+++ b/.github/workflows/coverity-scan.yml
@@ -20,7 +20,9 @@ jobs:
       if: ${{ env.coverity_token }}
       id: tool
       run: |
-        FILENAME=$(curl -LI "https://scan.coverity.com/download/linux64?token=$coverity_token&project=UltraGrid"  | sed -n '/content-disposition/s/.*\"\(.*\)\"/\1/p')
+        FILENAME=$(curl -LIf "https://scan.coverity.com/download/linux64\
+        ?token=$coverity_token&project=UltraGrid" |
+        sed -n '/content-disposition/s/.*\"\(.*\)\"/\1/p')
         echo "filename=$FILENAME" >> $GITHUB_OUTPUT
     - name: Run actions/cache for Coverity build tool
       if: ${{ env.coverity_token }}
@@ -58,7 +60,8 @@ jobs:
         key: cache-ndi-${{ runner.os }}-${{ steps.etags.outputs.ndi }}
     - name: Download NDI
       if: ${{ env.coverity_token }} && steps.cache-ndi.outputs.cache-hit != 'true'
-      run: curl -L https://downloads.ndi.tv/SDK/NDI_SDK_Linux/Install_NDI_SDK_v6_Linux.tar.gz -o /var/tmp/Install_NDI_SDK_Linux.tar.gz
+      run: "curl -Lf https://downloads.ndi.tv/SDK/NDI_SDK_Linux/\
+       Install_NDI_SDK_v6_Linux.tar.gz -o /var/tmp/Install_NDI_SDK_Linux.tar.gz"
 
     - name: bootstrap
       run: |
@@ -77,7 +80,7 @@ jobs:
       if: ${{ env.coverity_token }}
       run: |
         tar caf ultragrid.tar.xz cov-int
-        result=$(curl -S --form token=$coverity_token \
+        result=$(curl -Sf --form token=$coverity_token \
           --form email=pulec@cesnet.cz \
           --form file=@ultragrid.tar.xz \
           --form version="$(date +%F)" \