diff --git a/docker/trivy/start.sh b/docker/trivy/start.sh
index ecf18c6..d5fdf1b 100644
--- a/docker/trivy/start.sh
+++ b/docker/trivy/start.sh
@@ -6,7 +6,11 @@ LOW_PRIORITY=${LOW_PRIORITY:-true}
 
 # Use SCANNERS_ENV if provided, otherwise default to vuln, config, secret
 if [ -n "$SCANNERS_ENV" ]; then
-    IFS=',' read -r -a SCANNERS <<< "$SCANNERS_ENV"
+    OLD_IFS="$IFS"
+    IFS=',' read -r -a SCANNERS <<EOF
+$SCANNERS_ENV
+EOF
+    IFS="$OLD_IFS"
 else
     SCANNERS=("vuln" "config" "secret")
 fi