diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d1aa1a07..37cb0065 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -26,6 +26,14 @@ jobs:
       - name: 'checksrc'
         run: ./ci/checksrc.sh
 
+  shellcheck:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@v4
+      - name: 'shellcheck'
+        run: ./ci/shellcheck.sh
+
   spellcheck:
     runs-on: ubuntu-latest
     steps:
diff --git a/ci/shellcheck.sh b/ci/shellcheck.sh
new file mode 100755
index 00000000..2d37c49a
--- /dev/null
+++ b/ci/shellcheck.sh
@@ -0,0 +1,12 @@
+#!/bin/sh
+# Copyright (C) Viktor Szakats
+#
+# SPDX-License-Identifier: curl
+
+# FIXME: os400/* scripts
+
+shellcheck --version
+# shellcheck disable=SC2046
+shellcheck --exclude=1091 \
+  --enable=avoid-nullary-conditions,deprecate-which \
+  $(grep -l -E '^#!(/usr/bin/env bash|/bin/sh|/bin/bash)' $(git ls-files | grep -v -F 'os400/'))