diff --git a/scripts/ci_install_dependency.sh b/scripts/ci_install_dependency.sh
index 8fb93a3e8..5fa202a32 100755
--- a/scripts/ci_install_dependency.sh
+++ b/scripts/ci_install_dependency.sh
@@ -1,3 +1,6 @@
+#!/bin/bash
+set -euxo pipefail
+
 # Install the dependency in CI.
 
 # Use repo from environment variable, passed from GitHub Actions
diff --git a/scripts/ci_install_rust.sh b/scripts/ci_install_rust.sh
index 85b3e9569..724207fd7 100755
--- a/scripts/ci_install_rust.sh
+++ b/scripts/ci_install_rust.sh
@@ -1,3 +1,6 @@
+#!/bin/bash
+set -euxo pipefail
+
 # these are required for actix
 apt-get update
 apt-get install -y libssl-dev pkg-config
diff --git a/scripts/version_branch_to_tag.sh b/scripts/version_branch_to_tag.sh
index 53272c1ef..9f587fb0b 100755
--- a/scripts/version_branch_to_tag.sh
+++ b/scripts/version_branch_to_tag.sh
@@ -1,4 +1,5 @@
 #!/bin/bash
+set -euxo pipefail
 
 # This script is used for release.
 # It tags all remote branches starting with 'v' with the same name as the branch,