Merge pull request #2940 from testssl/shellcheck_cherrypicked_2428

Shellcheck cherrypicked from PR #2428

.github/workflows/shellcheck.yml

@@ -0,0 +1,20 @@
+---
+name: Shellcheck
+on: [pull_request]
+permissions:
+  contents: read
+
+jobs:
+  shellcheck:
+    name: Shellcheck
+    runs-on: ubuntu-24.04
+    env:
+      LANG: C.UTF-8
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install shellcheck
+        run: sudo apt update && sudo apt install -y shellcheck && shellcheck --version
+
+      - name: Check shell scripts
+        run: shellcheck -x -P "SCRIPTDIR"/utils --severity=error testssl.sh

testssl.sh

@@ -462,7 +462,7 @@ declare TLS_CIPHER_OSSL_NAME=()
 declare TLS_CIPHER_RFC_NAME=()
 declare TLS_CIPHER_SSLVERS=()
 declare TLS_CIPHER_KX=()
-# shellcheck disable=SC2034 . This is a false positive
+# shellcheck disable=SC2034,SC1125        # False positives
 declare TLS_CIPHER_AUTH=()
 declare TLS_CIPHER_ENC=()
 declare TLS_CIPHER_EXPORT=()