This is a follow-up of #2292.

There is a SonarQube plugin that embeds shellcheck: https://github.com/sbaudoin/sonar-shellcheck

IMO it can be mentioned in the README (replace what was removed in 4dd7622).