diff --git a/.github/workflows/build-test.yaml b/.github/workflows/build-test.yaml
index bdbdcbb3c8..a69b6f18b3 100644
--- a/.github/workflows/build-test.yaml
+++ b/.github/workflows/build-test.yaml
@@ -3438,7 +3438,7 @@ jobs:
           set +e
 
           echo ${{ secrets.UPGRADE_TO_REPLICATED_SDK_LICENSE }} | base64 -d > license.yaml
-          LICENSE_ID=$(cat license.yaml | grep -oP 'licenseID:\s*\K\w+')
+          LICENSE_ID=$(grep -oP 'licenseID:\s*\K\w+' license.yaml)
           echo "license-id=$LICENSE_ID" >> $GITHUB_OUTPUT
 
           ./bin/kots \
@@ -3504,7 +3504,7 @@ jobs:
           APP_SLUG: upgrade-to-replicated-sdk
         run: |
           # remove the app
-          ./bin/kots remove $APP_SLUG -n "$KOTS_NAMESPACE" --undeploy
+          ./bin/kots remove "$APP_SLUG" -n "$KOTS_NAMESPACE" --undeploy
 
           # validate that the app reference was removed
           if [ "$(./bin/kots get apps --namespace "$KOTS_NAMESPACE" --output=json | tr -d '\n')" != "[]" ]; then
@@ -3520,7 +3520,7 @@ jobs:
           set +e
 
           echo ${{ secrets.REPLICATED_SDK_SUBCHART_NATIVE_HELM_V1 }} | base64 -d > license.yaml
-          LICENSE_ID=$(cat license.yaml | grep -oP 'licenseID:\s*\K\w+')
+          LICENSE_ID=$(grep -oP 'licenseID:\s*\K\w+' license.yaml)
           echo "license-id=$LICENSE_ID" >> $GITHUB_OUTPUT
 
           ./bin/kots \
@@ -3567,7 +3567,7 @@ jobs:
           APP_SLUG: replicated-sdk-subchart-native-helm-v1
         run: |
           # remove the app
-          ./bin/kots remove $APP_SLUG -n "$KOTS_NAMESPACE" --undeploy
+          ./bin/kots remove "$APP_SLUG" -n "$KOTS_NAMESPACE" --undeploy
 
           # validate that the app reference was removed
           if [ "$(./bin/kots get apps --namespace "$KOTS_NAMESPACE" --output=json | tr -d '\n')" != "[]" ]; then
@@ -3583,7 +3583,7 @@ jobs:
           set +e
 
           echo ${{ secrets.REPLICATED_SDK_SUBCHART_REPLICATED_HELM }} | base64 -d > license.yaml
-          LICENSE_ID=$(cat license.yaml | grep -oP 'licenseID:\s*\K\w+')
+          LICENSE_ID=$(grep -oP 'licenseID:\s*\K\w+' license.yaml)
           echo "license-id=$LICENSE_ID" >> $GITHUB_OUTPUT
 
           ./bin/kots \
@@ -3631,7 +3631,7 @@ jobs:
           APP_SLUG: replicated-sdk-subchart-replicated-helm
         run: |
           # remove the app
-          ./bin/kots remove $APP_SLUG -n "$KOTS_NAMESPACE" --undeploy
+          ./bin/kots remove "$APP_SLUG" -n "$KOTS_NAMESPACE" --undeploy
 
           # validate that the app reference was removed
           if [ "$(./bin/kots get apps --namespace "$KOTS_NAMESPACE" --output=json | tr -d '\n')" != "[]" ]; then