diff --git a/.github/linters/.hadolint.yml b/.github/linters/.hadolint.yml
index 4ae5ed33..a53249c7 100644
--- a/.github/linters/.hadolint.yml
+++ b/.github/linters/.hadolint.yml
@@ -6,3 +6,5 @@ ignored:
   - DL4001 # Ignore wget and curl in same file
   - DL4006 # ignore pipefail as we dont want to add layers
   - DL3018 # We do pin version in pipfile.lock
+  - DL3003 # Ignore workdir so we dont add layers
+  - SC2016 # ignore as its intepreted later
diff --git a/Dockerfile b/Dockerfile
index 089580af..5e0b945e 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -273,7 +273,7 @@ RUN CHECKSTYLE_LATEST=$(curl -s https://api.github.com/repos/checkstyle/checksty
     | grep browser_download_url \
     | grep ".jar" \
     | cut -d '"' -f 4) \
-    && curl --retry 5 --retry-delay 5 -sSL $CHECKSTYLE_LATEST \
+    && curl --retry 5 --retry-delay 5 -sSL "$CHECKSTYLE_LATEST" \
     --output /usr/bin/checkstyle
 
 ####################