diff --git a/.github/workflows/lib-deps-check.yaml b/.github/workflows/lib-deps-check.yaml
index b009c427df7..b77e931558f 100644
--- a/.github/workflows/lib-deps-check.yaml
+++ b/.github/workflows/lib-deps-check.yaml
@@ -71,14 +71,14 @@ jobs:
               # Lib files: Lib/foo.py -> foo, Lib/foo/__init__.py -> foo
               module=$(echo "$file" | sed -E 's|^Lib/||; s|/__init__\.py$||; s|\.py$||; s|/.*||')
             fi
-            if [[ -n "$module" && ! " $modules " =~ " $module " ]]; then
+            if [[ -n "$module" && " $modules " != *" $module "* ]]; then
               modules="$modules $module"
             fi
           done
 
           modules=$(echo "$modules" | xargs)  # trim whitespace
           echo "Detected modules: $modules"
-          echo "modules=$modules" >> $GITHUB_OUTPUT
+          echo "modules=$modules" >> "$GITHUB_OUTPUT"
 
       - name: Setup Python
         if: steps.changed-files.outputs.modules != ''
diff --git a/.github/workflows/update-doc-db.yml b/.github/workflows/update-doc-db.yml
index bcb766e0a35..6c5f717833c 100644
--- a/.github/workflows/update-doc-db.yml
+++ b/.github/workflows/update-doc-db.yml
@@ -87,17 +87,16 @@ jobs:
 
           OUTPUT_FILE='crates/doc/src/data.inc.rs'
 
-          echo -n '' > $OUTPUT_FILE
-
-          echo '// This file was auto-generated by `.github/workflows/update-doc-db.yml`.' >> $OUTPUT_FILE
-          echo "// CPython version: ${PYTHON_VERSION}" >> $OUTPUT_FILE
-          echo '// spell-checker: disable' >> $OUTPUT_FILE
-
-          echo '' >> $OUTPUT_FILE
-
-          echo "pub static DB: phf::Map<&'static str, &'static str> = phf::phf_map! {" >> $OUTPUT_FILE
-          cat crates/doc/generated/raw_entries.txt >> $OUTPUT_FILE
-          echo '};' >> $OUTPUT_FILE
+          # shellcheck disable=SC2016
+          {
+            echo '// This file was auto-generated by `.github/workflows/update-doc-db.yml`.'
+            echo "// CPython version: ${PYTHON_VERSION}"
+            echo '// spell-checker: disable'
+            echo ''
+            echo "pub static DB: phf::Map<&'static str, &'static str> = phf::phf_map! {"
+            cat crates/doc/generated/raw_entries.txt
+            echo '};'
+          } > "$OUTPUT_FILE"
 
       - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with: