CheckOps home

Tools directory

S

CheckOps

ShellCheck

ShellCheck is a GPL-3.0 static analysis tool for bash and sh scripts that warns about quoting bugs, syntax errors, pitfalls and portability issues with explanations.

Visit website

Latest public signals

Not refreshed yet. Refresh reads the public site and, when the entry has a GitHub repository, the latest release.

Visit Website

Introduction

ShellCheck is a static analysis tool for shell scripts. It finds syntax issues that confuse beginners, semantic problems that cause strange behaviour, and subtle pitfalls that can break otherwise working scripts under certain conditions.

Each warning has a code such as SC2086 with a wiki page explaining the problem and fix, which makes it a teaching tool as well as a linter. Classic finds include unquoted variables, useless use of cat, wrong test syntax and portability issues between bash, dash and POSIX sh. It runs online, from the CLI, in editors and inside other tools like actionlint.

In the quality loop ShellCheck guards deployment and CI scripts that often have no tests.

The source code is at koalaman/shellcheck on GitHub under the GPL-3.0 licence, with about 40,300 stars; the most recent commit was on 9 November 2026.

Features

  1. Quoting checks: Catches word-splitting bugs.
  2. Explained warnings: Wiki page for every code.
  3. Dialects: bash, sh, dash and ksh.
  4. Directives: Inline disables.
  5. Output formats: gcc, JSON, checkstyle, diff.
  6. Online playground: shellcheck.net.

Pros

  1. High value: Finds real bugs in scripts.
  2. Free to use: Open source under the GPL-3.0 licence, so the core tool costs nothing to use.
  3. Actively maintained: The repository had commits as recent as 9 November 2026.
  4. Community: About 40,300 GitHub stars.

Cons

  1. Shell only: No other languages.
  2. Some false positives: Dynamic scripts may need directives.
  3. Haskell build: Building from source is unusual; use packages.
shellcheck -s bash scripts/*.sh

Resources:

Pricing

ShellCheck is free and open source under the GPL-3.0 licence.

  1. Anyone writing shell scripts.
  2. DevOps teams with deployment scripts.

Conclusion

ShellCheck is essential for shell scripts.

Add it to every repository that contains them.

On CheckOps, ShellCheck is filed under the Release & CI gates stage. Related tools listed here include actionlint, Hadolint, MegaLinter, Super-Linter, pre-commit and Semgrep. Which one fits best depends mostly on your stack, your team’s size and skills, and whether you prefer to run tools yourself or pay for a managed service. This page reflects the official website, documentation and repository as they stood on 11 November 2026.

Alternatives

Other tools on CheckOps that cover similar ground. Open a page, or compare one with ShellCheck side by side.