diff --git a/mariadb/Dockerfile b/mariadb/Dockerfile
index f74de4c..ea3d231 100644
--- a/mariadb/Dockerfile
+++ b/mariadb/Dockerfile
@@ -1,3 +1,4 @@
+# checkov:skip=CKV_DOCKER_3 We're not adding a user, its coming down from on-high in mariadb.
 FROM mariadb:injected-version
 
 LABEL maintainer="Matthew Baggett <matthew@baggett.me>" \
diff --git a/postgres/Dockerfile b/postgres/Dockerfile
index 076dd31..18f492e 100644
--- a/postgres/Dockerfile
+++ b/postgres/Dockerfile
@@ -1,3 +1,4 @@
+# checkov:skip=CKV_DOCKER_3 We're not adding a user, its coming down from on-high in postgres.
 FROM postgres:injected-version
 
 LABEL maintainer="Matthew Baggett <matthew@baggett.me>" \
diff --git a/postgres/postgres_healthcheck.sh b/postgres/postgres_healthcheck.sh
index de4a464..974ddf8 100755
--- a/postgres/postgres_healthcheck.sh
+++ b/postgres/postgres_healthcheck.sh
@@ -1,2 +1,2 @@
 #!/bin/bash
-PG_PASSWORD=$POSTGRES_PASSWORD pg_isready -U "$POSTGRES_USER"
+PG_PASSWORD=${POSTGRES_PASSWORD} pg_isready -U "${POSTGRES_USER}"