diff --git a/pkg/api/controller.go b/pkg/api/controller.go
index 56fbb08d..38728b3d 100644
--- a/pkg/api/controller.go
+++ b/pkg/api/controller.go
@@ -75,7 +75,7 @@ func DumpRuntimeParams(log log.Logger) {
 
 	err := syscall.Getrlimit(syscall.RLIMIT_NOFILE, &rLimit)
 	if err == nil {
-		evt = evt.Uint64("max. open files", rLimit.Cur)
+		evt = evt.Uint64("max. open files", uint64(rLimit.Cur)) //nolint: unconvert // required for *BSD
 	}
 
 	if content, err := os.ReadFile("/proc/sys/net/core/somaxconn"); err == nil {
diff --git a/test/scripts/fuzzAll.sh b/test/scripts/fuzzAll.sh
index 5267665d..98af2f4e 100644
--- a/test/scripts/fuzzAll.sh
+++ b/test/scripts/fuzzAll.sh
@@ -1,4 +1,4 @@
-#!/bin/bash
+#!/usr/bin/env bash
 
 set -e
 
@@ -15,4 +15,4 @@ do
         parentDir=$(dirname $file)
         go test $parentDir -run=$func -fuzz=$func$ -fuzztime=${fuzzTime}s -tags sync,metrics,search,scrub,containers_image_openpgp | grep -oP -x '^(?:(?!\blevel\b).)*$'
     done
-done
\ No newline at end of file
+done
diff --git a/test/scripts/gen_certs.sh b/test/scripts/gen_certs.sh
index 4d0f6ee9..c52f6247 100755
--- a/test/scripts/gen_certs.sh
+++ b/test/scripts/gen_certs.sh
@@ -1,4 +1,6 @@
-#!/bin/bash -xe
+#!/usr/bin/env bash
+
+set -xe
 
 openssl req \
     -newkey rsa:2048 \
diff --git a/test/scripts/gen_nameless_certs.sh b/test/scripts/gen_nameless_certs.sh
index fd976724..b4959ba4 100755
--- a/test/scripts/gen_nameless_certs.sh
+++ b/test/scripts/gen_nameless_certs.sh
@@ -1,4 +1,6 @@
-#!/bin/bash -xe
+#!/usr/bin/env bash
+
+set -xe
 
 openssl req \
     -newkey rsa:2048 \