diff --git a/tools/packaging/static-build/pause-image/build-static-pause-image.sh b/tools/packaging/static-build/pause-image/build-static-pause-image.sh
index 1e0ef58403..f017b72472 100755
--- a/tools/packaging/static-build/pause-image/build-static-pause-image.sh
+++ b/tools/packaging/static-build/pause-image/build-static-pause-image.sh
@@ -10,15 +10,17 @@ set -o pipefail
 
 script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 
+# shellcheck source=/dev/null
 source "${script_dir}/../../scripts/lib.sh"
 
-[ -n "$pause_image_repo" ] || die "failed to get pause-image repo"
-[ -n "$pause_image_version" ] || die "failed to get pause-image version"
+[[ -n "${pause_image_repo}" ]] || die "failed to get pause-image repo"
+[[ -n "${pause_image_version}" ]] || die "failed to get pause-image version"
 
 pull_pause_image_from_remote() {
 	echo "pull pause image from remote"
 
 	skopeo copy "${pause_image_repo}":"${pause_image_version}" oci:pause:"${pause_image_version}"
+	# shellcheck disable=SC2154
 	rm -rf "${DESTDIR}/pause_bundle"
 	umoci unpack --rootless --image pause:"${pause_image_version}"  "${DESTDIR}/pause_bundle"
 	rm "${DESTDIR}/pause_bundle/umoci.json"