diff --git a/scripts/gitea-opensandbox-runner b/scripts/gitea-opensandbox-runner
index 9bd605b..12bb58c 100644
--- a/scripts/gitea-opensandbox-runner
+++ b/scripts/gitea-opensandbox-runner
@@ -7,10 +7,7 @@ set -euo pipefail
 
 socket_path=${SPIFFE_ENDPOINT_SOCKET#unix://}
 token_file=$(mktemp)
-cleanup() {
-  rm -f -- "$token_file"
-}
-trap cleanup EXIT
+trap 'rm -f -- "$token_file"' EXIT
 export GITEA_RUNNER_REGISTRATION_TOKEN_FILE="$token_file"
 deadline=$((SECONDS + 120))
 while (( SECONDS < deadline )); do