diff --git a/.github/workflows/authenticate-commits.yml b/.github/workflows/authenticate-commits.yml
index d068799d..58b32d8b 100644
--- a/.github/workflows/authenticate-commits.yml
+++ b/.github/workflows/authenticate-commits.yml
@@ -16,7 +16,7 @@ jobs:
           ALLOWED_SIGNERS: ${{ vars.MIDDLEWARE_ALLOWED_SIGNERS }}
         run: |
           mkdir -p ~/.ssh
-          echo $ALLOWED_SIGNERS > ~/.ssh/allowed_signers
+          echo "$ALLOWED_SIGNERS" > ~/.ssh/allowed_signers
           git config --global gpg.ssh.allowedSignersFile "~/.ssh/allowed_signers"
 
       - name: Validate commit signatures