diff --git a/commands b/commands
index 8f04248..c88dd60 100755
--- a/commands
+++ b/commands
@@ -8,7 +8,7 @@ case "$1" in
 
   help | ansible-deploy:help)
     help_content_func() {
-      #shellcheck disable=SC2034
+      # shellcheck disable=SC2034
       declare desc="return ansible-deploy plugin help content"
       cat<<help_content
     ansible-deploy:vault-pass appname, Add new app vault password for decrypting secrets
diff --git a/dependencies b/dependencies
index b1ad2c3..9b36e8e 100755
--- a/dependencies
+++ b/dependencies
@@ -2,6 +2,7 @@
 
 set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x
 
+# shellcheck disable=SC1090
 source "$PLUGIN_AVAILABLE_PATH/ansible-deploy/functions"
 
 dokku-ansible-deploy-dependencies "$@"
diff --git a/functions b/functions
index e55b510..dd4cd09 100755
--- a/functions
+++ b/functions
@@ -2,10 +2,11 @@
 
 set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x
 
+# shellcheck disable=SC1090
 source "$PLUGIN_CORE_AVAILABLE_PATH/common/functions"
 
 dokku-ansible-deploy-validate-dependencies() {
-  #shellcheck disable=SC2034
+  # shellcheck disable=SC2034
   declare desc="check that ansible dependencies are available"
 
   if ! command -v "ansible-playbook" &>/dev/null; then
@@ -15,7 +16,7 @@ dokku-ansible-deploy-validate-dependencies() {
 }
 
 dokku-ansible-deploy-vault-pass-cmd() {
-  #shellcheck disable=SC2034
+  # shellcheck disable=SC2034
   declare desc="add new app vault password for decryption of passwords"
 
   local app="$2"
@@ -31,6 +32,7 @@ dokku-ansible-deploy-vault-pass-cmd() {
     exit 0
   fi
 
+  # shellcheck disable=SC2162 disable=SC2116 disable=SC2006
   read -p "Please enter your vault password for $app: `echo $'\n> '`" vault_password
 
   if [[ ! -d "$DOKKU_LIB_ROOT/data/deploy.d/$app" ]]; then
@@ -50,19 +52,19 @@ dokku-ansible-deploy-vault-pass-cmd() {
 }
 
 dokku-ansible-deploy-dependencies() {
-  #shellcheck disable=SC2034
+  # shellcheck disable=SC2034
   declare desc="install plugin dependencies"
 
   export DEBIAN_FRONTEND=noninteractive
 
   if ! command -v "ansible" &>/dev/null; then
     dokku_col_log_info1_quiet "installing ansible"
-    apt install -qq -y ansible
+    apt install -qq -y ansible python3 python3-dev
   fi
 }
 
 dokku-ansible-deploy-post-extract() {
-  #shellcheck disable=SC2034
+  # shellcheck disable=SC2034
   declare desc="run the post-extract hook to setup the plugin"
 
   declare APP="$1" TMPDIR="$2"
diff --git a/post-extract b/post-extract
index c7982ec..cda2d34 100755
--- a/post-extract
+++ b/post-extract
@@ -2,6 +2,7 @@
 
 set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x
 
+# shellcheck disable=SC1090
 source "$PLUGIN_AVAILABLE_PATH/ansible-deploy/functions"
 
 dokku-ansible-deploy-post-extract "$@"
diff --git a/subcommands/vault-pass b/subcommands/vault-pass
index f9b437b..cc88b03 100755
--- a/subcommands/vault-pass
+++ b/subcommands/vault-pass
@@ -2,6 +2,7 @@
 
 set -eo pipefail; [[ $DOKKU_TRACE ]] && set -x
 
+# shellcheck disable=SC1090
 source "$PLUGIN_AVAILABLE_PATH/ansible-deploy/functions"
 
 dokku-ansible-deploy-vault-pass-cmd "$@"