diff --git a/maintainers/flake-module.nix b/maintainers/flake-module.nix
index 806444df4..829cc5c0f 100644
--- a/maintainers/flake-module.nix
+++ b/maintainers/flake-module.nix
@@ -106,7 +106,6 @@
             enable = true;
             excludes = [
               # We haven't linted these files yet
-              ''^tests/functional/supplementary-groups\.sh$''
               ''^tests/functional/toString-path\.sh$''
               ''^tests/functional/user-envs-migration\.sh$''
               ''^tests/functional/user-envs-test-case\.sh$''
diff --git a/tests/functional/supplementary-groups.sh b/tests/functional/supplementary-groups.sh
index a667d3e99..0f614a130 100755
--- a/tests/functional/supplementary-groups.sh
+++ b/tests/functional/supplementary-groups.sh
@@ -9,6 +9,7 @@ needLocalStore "The test uses --store always so we would just be bypassing the d
 
 TODO_NixOS
 
+# shellcheck disable=SC2119
 execUnshare <<EOF
   source common.sh
 
@@ -26,12 +27,12 @@ execUnshare <<EOF
   setLocalStore store1
   expectStderr 1 "\${cmd[@]}" | grepQuiet "setgroups failed"
 
-  # Fails with `require-drop-supplementary-groups`
+  # Fails with $(require-drop-supplementary-groups)
   setLocalStore store2
   NIX_CONFIG='require-drop-supplementary-groups = true' \
     expectStderr 1 "\${cmd[@]}" | grepQuiet "setgroups failed"
 
-  # Works without `require-drop-supplementary-groups`
+  # Works without $(require-drop-supplementary-groups)
   setLocalStore store3
   NIX_CONFIG='require-drop-supplementary-groups = false' \
     "\${cmd[@]}"