diff --git a/.github/workflows/shellcheck.yml b/.github/workflows/shellcheck.yml
index 1a729c2..0df5bbe 100644
--- a/.github/workflows/shellcheck.yml
+++ b/.github/workflows/shellcheck.yml
@@ -3,6 +3,9 @@ name: ShellCheck
 on:
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
   shellcheck:
     runs-on: ubuntu-latest
diff --git a/opensuse-migration-tool b/opensuse-migration-tool
index d2d2115..60d42c3 100755
--- a/opensuse-migration-tool
+++ b/opensuse-migration-tool
@@ -86,8 +86,11 @@ if [[ ! -f /etc/os-release ]]; then
     exit 2
 fi
 # Source OS release info
+# shellcheck disable=SC1091
 # shellcheck source=/etc/os-release
 source /etc/os-release
+NAME=${NAME:-}
+VERSION=${VERSION:-}
 ARCH=$(uname -i) # x86_64 XXX: check for other arches
 
 # Fetch distribution data from API