diff --git a/services/gitea/oneoffs/veles-feedback-acl-ensure-job.yaml b/services/gitea/oneoffs/veles-feedback-acl-ensure-job.yaml
index cc7b3fdb4..feb8d50d0 100644
--- a/services/gitea/oneoffs/veles-feedback-acl-ensure-job.yaml
+++ b/services/gitea/oneoffs/veles-feedback-acl-ensure-job.yaml
@@ -1,11 +1,11 @@
 # services/gitea/oneoffs/veles-feedback-acl-ensure-job.yaml
-# One-off job for gitea/veles-feedback-acl-ensure-3.
+# One-off job for gitea/veles-feedback-acl-ensure-4.
 # Purpose: keep Veles feedback anonymously readable while limiting write access
 # to testers/admins and avoiding source-code repository access.
 apiVersion: batch/v1
 kind: Job
 metadata:
-  name: veles-feedback-acl-ensure-3
+  name: veles-feedback-acl-ensure-4
   namespace: gitea
 spec:
   suspend: false
@@ -45,7 +45,8 @@ spec:
       containers:
         - name: apply
           image: postgres:15
-          command: ["/scripts/veles_feedback_acl_ensure.sh"]
+          command: ["/bin/sh"]
+          args: ["/scripts/veles_feedback_acl_ensure.sh"]
           volumeMounts:
             - name: veles-feedback-acl-ensure-script
               mountPath: /scripts