diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.accept_keywords
index 6b76a893e5..6589f2a981 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.accept_keywords
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.accept_keywords
@@ -21,7 +21,7 @@
 =dev-util/bpftool-5.15.8 **
 
 # needed by arm64-native SDK
-dev-util/checkbashisms *
+=dev-util/checkbashisms-2.21.4 ~arm64
 
 =net-dns/c-ares-1.17.2 ~arm64
 =net-firewall/conntrack-tools-1.4.5 ~arm64
diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
index 64c46e053d..25abb0e656 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
@@ -12,9 +12,6 @@
 =dev-lang/rust-1.58.1 ~amd64 ~arm64
 =virtual/rust-1.58.1 ~amd64 ~arm64
 
-# no version marked stable upstream
-dev-util/checkbashisms
-
 =dev-libs/elfutils-0.178 ~amd64
 
 =dev-libs/libgcrypt-1.9.4 ~amd64 ~arm64