diff --git a/plugins/debian/debsecan_ b/plugins/debian/debsecan_
index fa43aeba..68d402c9 100755
--- a/plugins/debian/debsecan_
+++ b/plugins/debian/debsecan_
@@ -73,7 +73,10 @@ if [ ! -x /usr/bin/debsecan ]; then
 fi
 
 # Suite is taken from environment but defaults to `os-release` content
-SUITE=$(. /etc/os-release && echo "${suite:-$VERSION_CODENAME}")
+SUITE=$(
+  . /etc/os-release
+  echo "${suite:-$VERSION_CODENAME}"
+)
 
 FIXEDWARN=${fixed_warning:-1}
 FIXEDCRIT=${fixed_critical:-1000}