diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index 995b9808..19f6ae16 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -27,6 +27,10 @@ jobs:
           STDOUT_LOG=$(mktemp --suffix=stdout.log)
           echo STDOUT_LOG=$STDOUT_LOG >> $GITHUB_ENV
           tox -e test,coverage-report --result-json=test-result.json | tee $STDOUT_LOG ; test ${PIPESTATUS[0]} -eq 0
+      - name: Tmate debugging session (gh-hosted)
+        if: failure()
+        uses: mxschmitt/action-tmate@v3
+        timeout-minutes: 120
       - name: Export test report
         if: always()
         uses: actions/github-script@v7