diff --git a/.github/workflows/deployment-monitor.yml b/.github/workflows/deployment-monitor.yml
index 375d3dbf26..91052046cb 100644
--- a/.github/workflows/deployment-monitor.yml
+++ b/.github/workflows/deployment-monitor.yml
@@ -119,7 +119,10 @@ jobs:
         shell: pwsh
         run: |
           Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope CurrentUser
-          Invoke-RestMethod -Uri https://get.scoop.sh | Invoke-Expression
+          Invoke-RestMethod -Uri https://get.scoop.sh -OutFile install-scoop.ps1
+          if ((Get-Item install-scoop.ps1).Length -lt 1000) { throw "Scoop installer download looks truncated" }
+          & ./install-scoop.ps1
+          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
           scoop bucket add snyk https://github.com/snyk/scoop-snyk
           scoop install snyk
       - name: Capture version and shasum metadata