diff --git a/build-docker.sh b/build-docker.sh
index bb8616d84..42db1c5e1 100755
--- a/build-docker.sh
+++ b/build-docker.sh
@@ -1,4 +1,4 @@
-#!/bin/bash
+#!/usr/bin/env bash
 set -e
 
 if [ "$1" = "--gcc_source" ]; then
diff --git a/core/tests/check_coverage.sh b/core/tests/check_coverage.sh
index 836c3a035..838143ba6 100755
--- a/core/tests/check_coverage.sh
+++ b/core/tests/check_coverage.sh
@@ -1,4 +1,4 @@
-#!/bin/bash
+#!/usr/bin/env bash
 find ../mocks -name '*.py' | sort | while read module; do
     module=$(echo $module | sed 's:^\.\./mocks/::')
     base=$(basename $module)
diff --git a/core/tests/run_tests.sh b/core/tests/run_tests.sh
index 29d668333..c015d48ba 100755
--- a/core/tests/run_tests.sh
+++ b/core/tests/run_tests.sh
@@ -1,4 +1,4 @@
-#!/bin/bash
+#!/usr/bin/env bash
 
 declare -a results
 declare -i PYOPT=1 passed=0 failed=0 exit_code=0
diff --git a/core/tests/run_tests_device_emu.sh b/core/tests/run_tests_device_emu.sh
index 4a7841261..f214a1b63 100755
--- a/core/tests/run_tests_device_emu.sh
+++ b/core/tests/run_tests_device_emu.sh
@@ -1,4 +1,4 @@
-#!/bin/bash
+#!/usr/bin/env bash
 
 : "${RUN_TEST_EMU:=1}"
 
diff --git a/core/tests/run_tests_device_emu_monero.sh b/core/tests/run_tests_device_emu_monero.sh
index cb4b5e168..feb8d67eb 100755
--- a/core/tests/run_tests_device_emu_monero.sh
+++ b/core/tests/run_tests_device_emu_monero.sh
@@ -1,4 +1,4 @@
-#!/bin/bash
+#!/usr/bin/env bash
 
 : "${RUN_PYTHON_TESTS:=0}"
 : "${FORCE_DOCKER_USE:=0}"
diff --git a/core/trezor_cmd.sh b/core/trezor_cmd.sh
index e1b31ca4d..cb96072f1 100644
--- a/core/trezor_cmd.sh
+++ b/core/trezor_cmd.sh
@@ -1,4 +1,4 @@
-#!/bin/bash
+#!/usr/bin/env bash
 
 # expected inputs:
 # TREZOR_SRC -- directory containing python code for uMP
diff --git a/create_monorepo.py b/create_monorepo.py
index 434142ed7..00ecf2d85 100644
--- a/create_monorepo.py
+++ b/create_monorepo.py
@@ -1,4 +1,4 @@
-#!/usr/bin/python3
+#!/usr/bin/env python3
 import glob
 import os
 import subprocess
diff --git a/legacy/bootloader/combine/write.sh b/legacy/bootloader/combine/write.sh
index 6854ee600..09d95aacd 100755
--- a/legacy/bootloader/combine/write.sh
+++ b/legacy/bootloader/combine/write.sh
@@ -1,2 +1,2 @@
-#!/bin/bash
+#!/usr/bin/env bash
 st-flash write combined.bin 0x8000000
diff --git a/legacy/firmware/u2f/genkeys.sh b/legacy/firmware/u2f/genkeys.sh
index 33371d5be..d02b3c26d 100755
--- a/legacy/firmware/u2f/genkeys.sh
+++ b/legacy/firmware/u2f/genkeys.sh
@@ -1,4 +1,4 @@
-#!/bin/bash
+#!/usr/bin/env bash
 set -e
 
 cat > u2f_keys.h <<EOF
diff --git a/legacy/script/bootstrap b/legacy/script/bootstrap
index 617aa6911..dac41a2ac 100755
--- a/legacy/script/bootstrap
+++ b/legacy/script/bootstrap
@@ -1,4 +1,4 @@
-#!/bin/bash
+#!/usr/bin/env bash
 
 # script/bootstrap: Resolve all dependencies that the application requires to
 #                   run.
diff --git a/legacy/script/cibuild b/legacy/script/cibuild
index b02691b70..ec6d39caf 100755
--- a/legacy/script/cibuild
+++ b/legacy/script/cibuild
@@ -1,4 +1,4 @@
-#!/bin/bash
+#!/usr/bin/env bash
 
 # script/cibuild: Setup environment for CI to run tests. This is primarily
 #                 designed to run on the continuous integration server.
diff --git a/legacy/script/setup b/legacy/script/setup
index 704168ece..f7199ccfa 100755
--- a/legacy/script/setup
+++ b/legacy/script/setup
@@ -1,4 +1,4 @@
-#!/bin/bash
+#!/usr/bin/env bash
 
 # script/setup: Set up application for the first time after cloning, or set it
 #               back to the initial first unused state.
diff --git a/legacy/script/test b/legacy/script/test
index fbd51180e..03a0427b5 100755
--- a/legacy/script/test
+++ b/legacy/script/test
@@ -1,4 +1,4 @@
-#!/bin/bash
+#!/usr/bin/env bash
 
 # script/test: Run test suite for application.
 
diff --git a/legacy/script/toolchain-download b/legacy/script/toolchain-download
index b20b4c308..93104135b 100755
--- a/legacy/script/toolchain-download
+++ b/legacy/script/toolchain-download
@@ -1,4 +1,4 @@
-#!/bin/bash
+#!/usr/bin/env bash
 
 # script/toolchain-download: Download and extract the GNU Arm Embedded toolchain
 #                            for building the Trezor firmware.
diff --git a/legacy/script/toolchain-run b/legacy/script/toolchain-run
index 09e2a63d8..94331474f 100755
--- a/legacy/script/toolchain-run
+++ b/legacy/script/toolchain-run
@@ -1,4 +1,4 @@
-#!/bin/bash
+#!/usr/bin/env bash
 
 # script/toolchain-run: Run command with downloaded GNU Arm Embedded toolchain.
 #
diff --git a/python/helper-scripts/build-coins-json.sh b/python/helper-scripts/build-coins-json.sh
index 316132b4d..ee940d57c 100755
--- a/python/helper-scripts/build-coins-json.sh
+++ b/python/helper-scripts/build-coins-json.sh
@@ -1,4 +1,4 @@
-#!/bin/bash
+#!/usr/bin/env bash
 cd $(dirname $0)/..
 
 DEST=src/trezorlib/coins.json
diff --git a/tests/download_emulators.sh b/tests/download_emulators.sh
index 90aaa4bc1..01678a050 100755
--- a/tests/download_emulators.sh
+++ b/tests/download_emulators.sh
@@ -1,4 +1,4 @@
-#!/bin/bash
+#!/usr/bin/env bash
 SITE="https://firmware.corp.sldev.cz/upgrade_tests/"
 cd "$(dirname "$0")"
 
diff --git a/tools/build_protobuf b/tools/build_protobuf
index b5484f582..31ba7808e 100755
--- a/tools/build_protobuf
+++ b/tools/build_protobuf
@@ -1,4 +1,4 @@
-#!/bin/bash
+#!/usr/bin/env bash
 cd $(dirname $0)/..
 
 PROTOB=common/protob
diff --git a/tools/clang-format-check b/tools/clang-format-check
index c5f2d9936..1ac7a48cc 100755
--- a/tools/clang-format-check
+++ b/tools/clang-format-check
@@ -1,4 +1,4 @@
-#!/bin/bash
+#!/usr/bin/env bash
 error=0
 for f in $*; do
     changes=$(clang-format -output-replacements-xml "$f" | grep -c '^<replacement '; exit ${PIPESTATUS[0]})