diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index d1c8579..baab31a 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -149,7 +149,7 @@ jobs:
           echo busybox:latest >> images.txt
           echo debian:sid >> images.txt
 
-          kubectl create --dry-run=client -o yaml --namespace=$NS configmap "$name" --from-file="images.txt=images.txt" > manifest.yaml
+          kubectl create --dry-run=client -o yaml --namespace="$NS" configmap "$name" --from-file="images.txt=images.txt" > manifest.yaml
           echo --- >> manifest.yaml
           ./deploy/deploy \
             --version="$(git rev-parse --short HEAD)" \
@@ -157,8 +157,8 @@ jobs:
             --collect-metrics \
             "${name}" >> manifest.yaml
           
-          kubectl create ns $NS
-          kubectl apply -n $NS -f manifest.yaml
+          kubectl create ns "$NS"
+          kubectl apply -n "$NS" -f manifest.yaml
 
       - name: Wait for prefetcher to finish
         run: |
@@ -190,12 +190,12 @@ jobs:
       - name: Dump debug info
         if: always()
         run: |
-          kubectl -n $NS get -o yaml daemonsets,pods,services,roles,rolebindings
-          kubectl -n $NS get events
-          kubectl -n $NS logs -l app=basic-metrics --all-containers=true --ignore-errors=true --tail=-1
-          kubectl -n $NS logs -l app=basic-metrics --all-containers=true --ignore-errors=true --tail=-1 --previous=true
-          kubectl -n $NS logs -l app=basic --all-containers=true --ignore-errors=true --tail=-1
-          kubectl -n $NS logs -l app=basic --all-containers=true --ignore-errors=true --tail=-1 --previous=true
+          kubectl -n "$NS" get -o yaml daemonsets,pods,services,roles,rolebindings
+          kubectl -n "$NS" get events
+          kubectl -n "$NS" logs -l app=basic-metrics --all-containers=true --ignore-errors=true --tail=-1
+          kubectl -n "$NS" logs -l app=basic-metrics --all-containers=true --ignore-errors=true --tail=-1 --previous=true
+          kubectl -n "$NS" logs -l app=basic --all-containers=true --ignore-errors=true --tail=-1
+          kubectl -n "$NS" logs -l app=basic --all-containers=true --ignore-errors=true --tail=-1 --previous=true
 
       - name: Teardown cluster
         if: always()