diff --git a/maintainers/flake-module.nix b/maintainers/flake-module.nix
index ba38633bc..d303cb213 100644
--- a/maintainers/flake-module.nix
+++ b/maintainers/flake-module.nix
@@ -106,7 +106,6 @@
             enable = true;
             excludes = [
               # We haven't linted these files yet
-              ''^tests/functional/fetchGitVerification\.sh$''
               ''^tests/functional/fetchMercurial\.sh$''
               ''^tests/functional/fixed\.builder1\.sh$''
               ''^tests/functional/fixed\.builder2\.sh$''
diff --git a/tests/functional/fetchGitVerification.sh b/tests/functional/fetchGitVerification.sh
index 4012d8229..79c78d0c9 100755
--- a/tests/functional/fetchGitVerification.sh
+++ b/tests/functional/fetchGitVerification.sh
@@ -21,29 +21,29 @@ ssh-keygen -f "$keysDir/testkey2" -t rsa -P "" -C "test key 2"
 key2File="$keysDir/testkey2.pub"
 publicKey2=$(awk '{print $2}' "$key2File")
 
-git init $repo
-git -C $repo config user.email "foobar@example.com"
-git -C $repo config user.name "Foobar"
-git -C $repo config gpg.format ssh
+git init "$repo"
+git -C "$repo" config user.email "foobar@example.com"
+git -C "$repo" config user.name "Foobar"
+git -C "$repo" config gpg.format ssh
 
-echo 'hello' > $repo/text
-git -C $repo add text
-git -C $repo -c "user.signingkey=$key1File" commit -S -m 'initial commit'
+echo 'hello' > "$repo"/text
+git -C "$repo" add text
+git -C "$repo" -c "user.signingkey=$key1File" commit -S -m 'initial commit'
 
 out=$(nix eval --impure --raw --expr "builtins.fetchGit { url = \"file://$repo\"; keytype = \"ssh-rsa\"; publicKey = \"$publicKey2\"; }" 2>&1) || status=$?
 [[ $status == 1 ]]
-[[ $out =~ 'No principal matched.' ]]
+[[ $out == *'No principal matched.'* ]]
 [[ $(nix eval --impure --raw --expr "builtins.readFile (builtins.fetchGit { url = \"file://$repo\"; publicKey = \"$publicKey1\"; } + \"/text\")") = 'hello' ]]
 
-echo 'hello world' > $repo/text
+echo 'hello world' > "$repo"/text
 
 # Verification on a dirty repo should fail.
 out=$(nix eval --impure --raw --expr "builtins.fetchGit { url = \"file://$repo\"; keytype = \"ssh-rsa\"; publicKey = \"$publicKey2\"; }" 2>&1) || status=$?
 [[ $status == 1 ]]
 [[ $out =~ 'dirty' ]]
 
-git -C $repo add text
-git -C $repo -c "user.signingkey=$key2File" commit -S -m 'second commit'
+git -C "$repo" add text
+git -C "$repo" -c "user.signingkey=$key2File" commit -S -m 'second commit'
 
 [[ $(nix eval --impure --raw --expr "builtins.readFile (builtins.fetchGit { url = \"file://$repo\"; publicKeys = [{key = \"$publicKey1\";} {type = \"ssh-rsa\"; key = \"$publicKey2\";}]; } + \"/text\")") = 'hello world' ]]
 
@@ -80,5 +80,6 @@ cat > "$flakeDir/flake.nix" <<EOF
 }
 EOF
 out=$(nix build "$flakeDir#test" 2>&1) || status=$?
+
 [[ $status == 1 ]]
-[[ $out =~ 'No principal matched.' ]]
+[[ $out == *'No principal matched.'* ]]