diff --git a/plugins/debian/debsecan_ b/plugins/debian/debsecan_
index 3e18d316..fa43aeba 100755
--- a/plugins/debian/debsecan_
+++ b/plugins/debian/debsecan_
@@ -72,8 +72,8 @@ if [ ! -x /usr/bin/debsecan ]; then
   exit 1
 fi
 
-. /etc/os-release
-SUITE=${suite:-$VERSION_CODENAME}
+# Suite is taken from environment but defaults to `os-release` content
+SUITE=$(. /etc/os-release && echo "${suite:-$VERSION_CODENAME}")
 
 FIXEDWARN=${fixed_warning:-1}
 FIXEDCRIT=${fixed_critical:-1000}