diff --git a/shim.spec b/shim.spec
index 5e23d028454692b09707c505ca6cfc4b60a8fd7a..18bdec20b085f9bc175581d45a8b66ac01e0a6f0 100644
--- a/shim.spec
+++ b/shim.spec
@@ -22,7 +22,7 @@
 
 Name:	   	   shim
 Version:	   15.4
-Release:	   5
+Release:	   6
 Summary:	   First-stage UEFI bootloader
 ExclusiveArch:     x86_64 aarch64
 License:	   BSD
@@ -141,6 +141,9 @@ install -m 644 shim%{efi_arch}.efi.debug ${RPM_BUILD_ROOT}/usr/lib/debug/%{shime
 
 cd ..
 
+%check
+make test
+
 %files
 %license COPYRIGHT
 %{shimBOOT}/fb%{efi_arch}.efi
@@ -163,6 +166,9 @@ cd ..
 /usr/src/debug/%{name}-%{version}-%{release}/*
 
 %changelog
+* Tue Jan 10 2023 jinlun <jinlun@huawei.com> - 15.4-5
+- add code check in shim
+
 * Tue Sep 20 2022 jinlun <jinlun@huawei.com> - 15.4-5
 - fix CVE-2017-3735 CVE-2017-3737 CVE-2018-0732 CVE-2018-0737
   CVE-2018-0739 CVE-2019-1563 CVE-2020-1971 CVE-2021-23840