diff --git a/.github/workflows/update-nightly.yml b/.github/workflows/update-nightly.yml
index a0a17f0213..0bc06b16b4 100644
--- a/.github/workflows/update-nightly.yml
+++ b/.github/workflows/update-nightly.yml
@@ -37,11 +37,11 @@ jobs:
             git config gpg.format "ssh"
             git config user.signingkey "${{ runner.temp }}/signing_key"
             msg="bump(nightly): $(git status | grep modified | sed -r 's@.+/([^/]+)/[^/]+\n?@\1 @g' | tr -d '\n')"
-            git commit -S -a -m $msg
+            git commit -S -a -m "$msg"
             git format-patch HEAD^
             git checkout f38
             git apply *.patch
             rm *.patch
-            git commit -S -a -m $msg
+            git commit -S -a -m "$msg"
             git push -u origin f38
           fi
diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index ad1707def8..58d70e9065 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -38,11 +38,11 @@ jobs:
             git config gpg.format "ssh"
             git config user.signingkey "${{ runner.temp }}/signing_key"
             msg="bump: $(git status | grep modified | sed -r 's@.+/([^/]+)/[^/]+\n?@\1 @g' | tr -d '\n')"
-            git commit -S -a -m $msg
+            git commit -S -a -m "$msg"
             git format-patch HEAD^
             git checkout f38
             git apply *.patch
             rm *.patch
-            git commit -S -a -m $msg
+            git commit -S -a -m "$msg"
             git push -u origin f38
           fi