diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index e2ce3f5489b9..3eb035323c40 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -99,9 +99,9 @@ jobs:
           CERTIFICATE_WINDOWS_APPLICATION: ${{ secrets.CERTIFICATE_WINDOWS_APPLICATION }}
         if: env.CERTIFICATE_WINDOWS_APPLICATION != null
         run: |
-          echo ${{ secrets.CERTIFICATE_WINDOWS_APPLICATION }} > slippi_llc.b64
+          echo "${{ secrets.CERTIFICATE_WINDOWS_APPLICATION }}" > slippi_llc.b64
           certutil -decode slippi_llc.b64 slippi_llc.p12
-          signtool sign /f slippi_llc.p12 /p ${{ secrets.CERTIFICATE_WINDOWS_PASSWORD }} /fd SHA256 /tr http://ts.ssl.com /td SHA256 "Binary\x64\Slippi_Dolphin.exe"
+          signtool sign /f slippi_llc.p12 /p "${{ secrets.CERTIFICATE_WINDOWS_PASSWORD }}" /fd SHA256 /tr http://ts.ssl.com /td SHA256 "Binary\x64\Slippi_Dolphin.exe"
       - name: Package Artifact
         working-directory: ${{ github.workspace }}
         run: |