diff --git a/.forgejo/workflows/cache.yaml b/.forgejo/workflows/cache.yaml
index fd4c7d9d..b3f4e7df 100644
--- a/.forgejo/workflows/cache.yaml
+++ b/.forgejo/workflows/cache.yaml
@@ -15,7 +15,7 @@ jobs:
 
       - name: Cache
         run: |
-          nix-shell --run "attic login fediversity https://attic.fediversity.net ${{ secrets.ATTIC_PUSH_KEY }} && attic use demo"
+          nix-shell --run "attic login fediversity https://attic.fediversity.net '${{ secrets.ATTIC_PUSH_KEY }}' && attic use demo"
           env
           mkdir -p ~/.ssh
           echo "${{ secrets.CD_SSH_KEY }}" > ~/.ssh/id_ed25519
diff --git a/.forgejo/workflows/ci.yaml b/.forgejo/workflows/ci.yaml
index 31ff1c91..b30406d8 100644
--- a/.forgejo/workflows/ci.yaml
+++ b/.forgejo/workflows/ci.yaml
@@ -23,7 +23,7 @@ jobs:
 
       - name: Cache
         run: |
-          nix-shell --run "attic login fediversity https://attic.fediversity.net ${{ secrets.ATTIC_PUSH_KEY }} && attic use demo"
+          nix-shell --run "attic login fediversity https://attic.fediversity.net '${{ secrets.ATTIC_PUSH_KEY }}' && attic use demo"
           env
           mkdir -p ~/.ssh
           echo "${{ secrets.CD_SSH_KEY }}" > ~/.ssh/id_ed25519