diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
index ef80585..cd7b86e 100644
--- a/.github/workflows/audit.yml
+++ b/.github/workflows/audit.yml
@@ -7,7 +7,7 @@ on: # yamllint disable-line rule:truthy
   - cron: "0 0 * * 1"
 jobs:
   Audit:
-    runs-on: "ubuntu-latest"
+    runs-on: "ubuntu-22.04"
     env:
       GOPATH: "/home/runner/go"
     steps:
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 5a4a5cd..54b5d42 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -5,7 +5,7 @@ on: # yamllint disable-line rule:truthy
   pull_request:
 jobs:
   Lint:
-    runs-on: "ubuntu-latest"
+    runs-on: "ubuntu-22.04"
     env:
       GOPATH: "/home/runner/go"
     steps:
@@ -13,7 +13,7 @@ jobs:
     - run: "echo \"${GOPATH}/bin\" >> $GITHUB_PATH"
     - uses: "actions/checkout@v4"
     - run: "sudo apt-get update"
-    - run: "sudo apt-get install -y wget zsh"
+    - run: "sudo apt-get install -y shellcheck wget zsh"
     - run: "wget https://go.dev/dl/go1.21.5.linux-amd64.tar.gz"
     - run: "sudo tar -C /usr/local -xzf go1.21.5.linux-amd64.tar.gz"
     - run: "./install"
diff --git a/README.md b/README.md
index 35c93fc..770f763 100755
--- a/README.md
+++ b/README.md
@@ -9,6 +9,7 @@ https://github.com/mcandre/dotfiles
 * POSIX compatible [findutils](https://pubs.opengroup.org/onlinepubs/9699919799/utilities/find.html)
 * POSIX compatible [grep](https://pubs.opengroup.org/onlinepubs/9699919799/utilities/grep.html)
 * POSIX compatible [sh](https://pubs.opengroup.org/onlinepubs/9699919799/utilities/sh.html)
+* [ShellCheck](https://www.shellcheck.net/) 0.8.0+
 * [Go](https://golang.org/) 1.21.5+
 * [Python](https://www.python.org/) 3.12.1+
 * Provision additional dev tools with `./install`