diff --git a/.github/workflows/build-test.yaml b/.github/workflows/build-test.yaml
index dd595a1df1..19fee2c5b8 100644
--- a/.github/workflows/build-test.yaml
+++ b/.github/workflows/build-test.yaml
@@ -279,8 +279,8 @@ jobs:
       - name: template melange and apko configs
         run: |
           export GIT_TAG=${{ needs.generate-tag.outputs.tag }}
-          envsubst '${GIT_TAG}' < deploy/melange.yaml.tmpl > deploy/melange.yaml
-          envsubst '${GIT_TAG}' < deploy/apko.yaml.tmpl > deploy/apko.yaml
+          envsubst "${GIT_TAG}" < deploy/melange.yaml.tmpl > deploy/melange.yaml
+          envsubst "${GIT_TAG}" < deploy/apko.yaml.tmpl > deploy/apko.yaml
 
       - uses: chainguard-dev/actions/melange-build@main
         with: