diff --git a/.changeset/serious-shoes-bake.md b/.changeset/serious-shoes-bake.md
new file mode 100644
index 0000000000..64f336e609
--- /dev/null
+++ b/.changeset/serious-shoes-bake.md
@@ -0,0 +1,6 @@
+---
+"@layerzerolabs/protocol-devtools-solana": patch
+"@layerzerolabs/ua-devtools-solana": patch
+---
+
+shell linting
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index e8bcb4b487..0a97e1b8a9 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -52,7 +52,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        language: ['javascript-typescript', 'rust']
+        language: ['javascript-typescript']
 
     # Skip autobuild - CodeQL can analyze source code directly
     # No need to compile or install dependencies for static analysis
diff --git a/bin/env b/bin/env
index da8ba386a6..b5280a1b62 100755
--- a/bin/env
+++ b/bin/env
@@ -10,5 +10,6 @@
 # (The "." will execute this inside the current shell instead of creating a child one)
 
 set -a
-source ${1:-.env}
+# shellcheck source=/dev/null
+source "${1:-.env}"
 set +a
\ No newline at end of file
diff --git a/packages/protocol-devtools-solana/bin/test b/packages/protocol-devtools-solana/bin/test
index dde4202665..2274958c98 100755
--- a/packages/protocol-devtools-solana/bin/test
+++ b/packages/protocol-devtools-solana/bin/test
@@ -3,5 +3,5 @@
 if [ -z "${LZ_DEVTOOLS_ENABLE_SOLANA_TESTS}" ]; then
     echo 'Solana tests can be enabled by setting LZ_DEVTOOLS_ENABLE_SOLANA_TESTS environment variable to a non-empty value'
 else
-    jest --ci $@
+    jest --ci "$@"
 fi
\ No newline at end of file
diff --git a/packages/ua-devtools-solana/bin/test b/packages/ua-devtools-solana/bin/test
index 76d18afe15..521e775e26 100755
--- a/packages/ua-devtools-solana/bin/test
+++ b/packages/ua-devtools-solana/bin/test
@@ -3,5 +3,5 @@
 if [ -z "${LZ_DEVTOOLS_ENABLE_SOLANA_TESTS}" ]; then
     echo 'Solana tests can be enabled by setting LZ_DEVTOOLS_ENABLE_SOLANA_TESTS environment variable to a non-empty value'
 else
-    jest --ci --pass-with-no-tests $@
+    jest --ci --pass-with-no-tests "$@"
 fi
\ No newline at end of file