diff --git a/lib/datasource/docker/index.ts b/lib/datasource/docker/index.ts
index 3fe4e61f08c1ff4af384cafbcc8a0f715c41bfc1..1f5a02df44c5ece39639657474856def05ac4e27 100644
--- a/lib/datasource/docker/index.ts
+++ b/lib/datasource/docker/index.ts
@@ -547,7 +547,10 @@ async function getLabels(
         },
         'Config Manifest is unknown'
       );
-    } else if (err.statusCode === 429 && registry.endsWith('docker.io')) {
+    } else if (
+      err.statusCode === 429 &&
+      registry.endsWith('docker.io') // lgtm [js/incomplete-url-substring-sanitization]
+    ) {
       logger.warn({ err }, 'docker registry failure: too many requests');
     } else if (err.statusCode >= 500 && err.statusCode < 600) {
       logger.warn(
diff --git a/lib/util/exec/docker/index.ts b/lib/util/exec/docker/index.ts
index 35c4ddc641425a16663d4d5fb296e5e6f0cd868e..b2b6b0957040da549e489bc1ed948f870d6f7d13 100644
--- a/lib/util/exec/docker/index.ts
+++ b/lib/util/exec/docker/index.ts
@@ -147,7 +147,7 @@ export async function generateDockerCommand(
     ...commands,
     ...prepareCommands(postCommands),
   ].join(' && ');
-  result.push(`bash -l -c "${bashCommand.replace(/"/g, '\\"')}"`);
+  result.push(`bash -l -c "${bashCommand.replace(/"/g, '\\"')}"`); // lgtm [js/incomplete-sanitization]
 
   return result.join(' ');
 }
diff --git a/lib/workers/pr/changelog/source-github.ts b/lib/workers/pr/changelog/source-github.ts
index 32b19a72c2b829b3f51ec05f10e2af32b82516d3..eec4e9bdf871a36f184f66c7d6be482a688ad391 100644
--- a/lib/workers/pr/changelog/source-github.ts
+++ b/lib/workers/pr/changelog/source-github.ts
@@ -72,9 +72,10 @@ export async function getChangeLogJSON({
     hostType: PLATFORM_TYPE_GITHUB,
     url,
   });
+  // istanbul ignore if
   if (!config.token) {
-    // istanbul ignore if
-    if (URL.parse(sourceUrl).host.endsWith('github.com')) {
+    // prettier-ignore
+    if (URL.parse(sourceUrl).host.endsWith('github.com')) { // lgtm [js/incomplete-url-substring-sanitization]
       logger.warn(
         { manager, depName, sourceUrl },
         'No github.com token has been configured. Skipping release notes retrieval'