diff --git a/pkg/tools/shell/risk_windows.go b/pkg/tools/shell/risk_windows.go
index badb88913..ae300f35d 100644
--- a/pkg/tools/shell/risk_windows.go
+++ b/pkg/tools/shell/risk_windows.go
@@ -68,9 +68,9 @@ func init() {
 		"powershell": RiskCritical, // Windows PowerShell 5.1 (Windows-only; pwsh is cross-platform)
 		"cmd":        RiskCritical,
 		"cmd.exe":    RiskCritical,
-		"cscript": RiskCritical,
-		"wscript": RiskCritical,
-		"mshta":   RiskCritical,
+		"cscript":    RiskCritical,
+		"wscript":    RiskCritical,
+		"mshta":      RiskCritical,
 	}
 
 	for k, v := range windowsCommands {
diff --git a/pkg/tools/shell/runner_test.go b/pkg/tools/shell/runner_test.go
index d008df8c4..219eb3e1c 100644
--- a/pkg/tools/shell/runner_test.go
+++ b/pkg/tools/shell/runner_test.go
@@ -157,7 +157,7 @@ func TestRun_TimeoutKillsBackgroundChild(t *testing.T) {
 	}
 
 	var pid int
-	if _, err := fmt.Sscanf(pidStr, "%d", &pid); err != nil {
+	if _, err = fmt.Sscanf(pidStr, "%d", &pid); err != nil {
 		t.Fatalf("failed to parse PID %q: %v", pidStr, err)
 	}