diff --git a/.github/scripts/sign-notarize-osx-distro-file.sh b/.github/scripts/sign-notarize-osx-distro-file.sh
index 33981ca72..e5edec2f5 100755
--- a/.github/scripts/sign-notarize-osx-distro-file.sh
+++ b/.github/scripts/sign-notarize-osx-distro-file.sh
@@ -41,7 +41,7 @@ rm -rf ./${destination_folder_name}
 rm -f $filename
 
 echo "Sign $dmg_filename"
-codesign --verbose --deep --force --timestamp --keychain $KEYCHAIN -s $MACOS_CERTIFICATE_ID $dmg_filename
+codesign --verbose --deep --force --timestamp --keychain $KEYCHAIN -s "${MACOS_CERTIFICATE_ID}" $dmg_filename
 
 echo "Notarizing $dmg_filename"
 (xcrun notarytool submit ${dmg_filename} --keychain-profile notarize-app-dmg-profile --wait \