diff --git a/.github/workflows/qa.yml b/.github/workflows/qa.yml
index 5bf6728..86003fc 100644
--- a/.github/workflows/qa.yml
+++ b/.github/workflows/qa.yml
@@ -16,7 +16,7 @@ jobs:
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - name: Hadolint
-        uses: hadolint/hadolint-action@v3.3.0
+        uses: hadolint/hadolint-action@v3.5.0
 
   shellcheck:
     runs-on: ubuntu-latest
diff --git a/Dockerfile b/Dockerfile
index f840b03..9b6a730 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -15,6 +15,6 @@ ENV TUNNEL_TRANSPORT_LOGLEVEL="error"
 ENV TUNNEL_LOGLEVEL="info"
 ENV TUNNEL_METRICS="0.0.0.0:2000"
 
-HEALTHCHECK --interval=5s --retries=6 --timeout=3s CMD wget -q ${TUNNEL_METRICS}/ready -O -
+HEALTHCHECK --interval=5s --retries=6 --timeout=3s CMD ["sh", "-c", "wget -q ${TUNNEL_METRICS}/ready -O -"]
 
 CMD ["firecow_cloudflared"]