shellcheck-configuration

Create a .shellcheckrc file in your project root specifying the target shell dialect, enabled optional checks, and disabled warnings. You can also set environment variables like SHELLCHECK_SHELL or pass flags directly on the command line.

Add a pipeline step that installs ShellCheck and runs it against all .sh files using find with -exec. GitHub Actions and GitLab CI both support this, and the koalaman/shellcheck-alpine image works for containerized pipelines.

Add a disable directive comment like '# shellcheck disable=SC2086' above the offending line, or list codes in the .shellcheckrc disable field. Document why each suppression exists rather than disabling warnings broadly.

SC2086 warns that an unquoted variable may undergo word splitting or glob expansion. Fix it by wrapping the variable in double quotes, or use array expansion like "${list[@]}" when iterating over multiple items.

Yes, ShellCheck analyzes bash, sh, dash, and ksh scripts. Set the shell target with --shell=sh or the shell directive in .shellcheckrc to enable POSIX-specific checks in the SC3000 range.

SC1091 appears when ShellCheck cannot follow a sourced file, often because the path is dynamic or the file is external. Use the source directive comment or enable external-sources in your configuration to resolve it.