diff --git a/flake.nix b/flake.nix
index dc14c1a..3f843cb 100644
--- a/flake.nix
+++ b/flake.nix
@@ -176,7 +176,10 @@
         pkgs = nixpkgs.legacyPackages.${system};
         pre-commit-check = pre-commit-hooks.lib.${system}.run {
           src = ./.;
-          hooks = { nixfmt.enable = true; };
+          hooks = {
+            nixfmt.enable = true;
+            shellcheck.enable = true;
+          };
         };
       in {
         formatter = nixpkgs.legacyPackages."${system}".nixfmt;
diff --git a/scripts/create-gpg-key b/scripts/create-gpg-key
index b6a859d..eac9946 100755
--- a/scripts/create-gpg-key
+++ b/scripts/create-gpg-key
@@ -1,5 +1,6 @@
 #! /usr/bin/env nix-shell
 #! nix-shell -i bash -p bash gnupg
+# shellcheck shell=bash
 
 set -euo pipefail
 
diff --git a/scripts/setup-partitions b/scripts/setup-partitions
index d00421a..3402ffd 100755
--- a/scripts/setup-partitions
+++ b/scripts/setup-partitions
@@ -1,5 +1,6 @@
 #! /usr/bin/env nix-shell
 #! nix-shell -i bash -p bash parted cryptsetup btrfs-progs
+# shellcheck shell=bash
 
 set -euo pipefail