diff --git a/plugins/builder-dockerfile/internal-functions b/plugins/builder-dockerfile/internal-functions
index 02fe4dee1b1..9a24879edc8 100755
--- a/plugins/builder-dockerfile/internal-functions
+++ b/plugins/builder-dockerfile/internal-functions
@@ -102,7 +102,8 @@ fn-builder-dockerfile-get-ports-from-image() {
   declare desc="return all exposed ports from passed image name"
   declare IMAGE="$1"
 
-  local ports="$("$DOCKER_BIN" image inspect --format "{{range $key, $value := .Config.ExposedPorts}}{{$key}} {{end}}" "$IMAGE" | xargs)" || true
+  # shellcheck disable=SC2016
+  local ports="$("$DOCKER_BIN" image inspect --format '{{range $key, $value := .Config.ExposedPorts}}{{$key}} {{end}}' "$IMAGE" | xargs)" || true
   echo "$ports"
 }