diff --git a/testing/run-shellsheck.sh b/testing/run-shellsheck.sh
new file mode 100755
index 0000000..b286a1a
--- /dev/null
+++ b/testing/run-shellsheck.sh
@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+
+set -uxa pipefail
+
+# Ignore SC2054 as it effectivly complains about qemu's syntax using commas
+# to separate elements that we group here in an array.
+# See https://www.shellcheck.net/wiki/SC2054.
+shellcheck --exclude=SC2054 --shell=bash ../control-vm.sh
diff --git a/todo b/todo
index c76f2d5..7688788 100644
--- a/todo
+++ b/todo
@@ -7,4 +7,3 @@
 # 7. shared dir without smb, but via FUSE
 # 8. bash and zsh-completion
 # 9. don't rely on the PID to check if the VM is running, query socket?
-# 10. shellsheck?