diff --git a/.github/workflows/build-and-test.yml b/.github/workflows/build-and-test.yml
index c3e9312fcb..7128ef4829 100644
--- a/.github/workflows/build-and-test.yml
+++ b/.github/workflows/build-and-test.yml
@@ -51,7 +51,7 @@ jobs:
       - name: "Install test runner dependencies"
         run: |
           set -xe
-          python -m pip install --upgrade pip setuptools wheel 'tox<4' tox-gh-actions coverage virtualenv snmpsim 'pyasn1<0.5.0'
+          python -m pip install --upgrade 'pip==23.1.0' setuptools wheel 'tox<4' tox-gh-actions coverage virtualenv snmpsim 'pyasn1<0.5.0'
           sudo apt-get install -y nbtscan
 
       # virtualenv seems to currently be embedding a broken version of
diff --git a/tox.ini b/tox.ini
index 81db28242f..eb3c4f6584 100644
--- a/tox.ini
+++ b/tox.ini
@@ -30,6 +30,7 @@ setenv =
     LC_ALL=C.UTF-8
     LANG=C.UTF-8
     PYTHONPATH = {toxinidir}/tests
+    VIRTUALENV_PIP=23.1.0
     BUILDDIR = {envdir}
     CHROME_BIN = /usr/bin/google-chrome
     DJANGO_SETTINGS_MODULE = nav.django.settings
@@ -91,6 +92,7 @@ setenv =
        PYLINTHOME = {toxinidir}
        LC_ALL=C.UTF-8
        LANG=C.UTF-8
+       VIRTUALENV_PIP=23.1.0
 commands_pre =
          pip-compile --resolver=backtracking --output-file {envdir}/requirements.txt tests/requirements.txt requirements/base.txt requirements/django32.txt
          pip-sync {envdir}/requirements.txt
@@ -105,6 +107,7 @@ setenv =
     DJANGO_SETTINGS_MODULE = nav.django.settings
     LC_ALL=C.UTF-8
     LANG=C.UTF-8
+    VIRTUALENV_PIP=23.1.0
 allowlist_externals = sh
 commands_pre =
          pip-compile --resolver=backtracking --output-file {envdir}/requirements.txt doc/requirements.txt