diff --git a/Makefile b/Makefile
index f9045df61..6b2b43f2d 100644
--- a/Makefile
+++ b/Makefile
@@ -138,7 +138,9 @@ shellcheck:
 
 shfmt:
 	shfmt -ln bats -d -w tests/integration/*.bats
-	shfmt -ln bash -d -w man/*.sh script/* tests/*.sh tests/integration/*.bash
+	shfmt -ln bash -d -w man/*.sh script/* \
+		tests/*.sh tests/integration/*.bash tests/fuzzing/*.sh \
+		contrib/completions/bash/runc contrib/cmd/seccompagent/*.sh
 
 vendor:
 	$(GO) mod tidy
diff --git a/contrib/cmd/seccompagent/gen-seccomp-example-cfg.sh b/contrib/cmd/seccompagent/gen-seccomp-example-cfg.sh
index bd4e209cf..e48f9fd99 100755
--- a/contrib/cmd/seccompagent/gen-seccomp-example-cfg.sh
+++ b/contrib/cmd/seccompagent/gen-seccomp-example-cfg.sh
@@ -12,7 +12,7 @@ fi
 # exits when not running inside bats. We can do hacks, but just to redefine
 # update_config() seems clearer. We don't even really need to keep them in sync.
 function update_config() {
-        jq "$1" "./config.json" | awk 'BEGIN{RS="";getline<"-";print>ARGV[1]}' "./config.json"
+	jq "$1" "./config.json" | awk 'BEGIN{RS="";getline<"-";print>ARGV[1]}' "./config.json"
 }
 
 update_config '.linux.seccomp = {