diff --git a/go.mod b/go.mod
index 2fc5c218..445cba22 100644
--- a/go.mod
+++ b/go.mod
@@ -19,5 +19,5 @@ require (
 	golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f
 	golang.org/x/sys v0.0.0-20180831094639-fa5fdf94c789 // indirect
 	gopkg.in/yaml.v2 v2.2.1
-	mvdan.cc/sh v2.6.3+incompatible
+	mvdan.cc/sh v2.6.4-0.20190222161105-3c71c7be1070+incompatible
 )
diff --git a/go.sum b/go.sum
index a8dcc7ee..acd5aede 100644
--- a/go.sum
+++ b/go.sum
@@ -43,5 +43,5 @@ gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/yaml.v2 v2.2.1 h1:mUhvW9EsL+naU5Q3cakzfE91YhliOondGd6ZrsDBHQE=
 gopkg.in/yaml.v2 v2.2.1/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
-mvdan.cc/sh v2.6.3+incompatible h1:uXnnFNSBQbKUwwh2iBSkVjG+GbwoMuI+UmBVPnNiWhA=
-mvdan.cc/sh v2.6.3+incompatible/go.mod h1:IeeQbZq+x2SUGBensq/jge5lLQbS3XT2ktyp3wrt4x8=
+mvdan.cc/sh v2.6.4-0.20190222161105-3c71c7be1070+incompatible h1:U5AlqVy1pp05pDGDckRqFqdvH7kF/V1fhJwNXkMzYYI=
+mvdan.cc/sh v2.6.4-0.20190222161105-3c71c7be1070+incompatible/go.mod h1:IeeQbZq+x2SUGBensq/jge5lLQbS3XT2ktyp3wrt4x8=