diff --git a/.github/workflows/diflow.yaml b/.github/workflows/diflow.yaml
index 916133e1a..b17053b8d 100644
--- a/.github/workflows/diflow.yaml
+++ b/.github/workflows/diflow.yaml
@@ -27,4 +27,4 @@ jobs:
       - name: Diflow run (don't push)
         run: |
           cd diflow
-          node dist/diflow.js sync -r https://${SECRET}@github.com/dbgate/dbgate-diflow-config.git -b master --skip-push --secret ${{ secrets.GITHUB_TOKEN }}
+          node dist/diflow.js sync -r https://${SECRET}@github.com/dbgate/dbgate-diflow-config.git -b master --skip-push --secret "${{ secrets.GITHUB_TOKEN }}"
diff --git a/workflow-templates/diflow.yaml b/workflow-templates/diflow.yaml
index 1eb862ae6..cc39b9e1d 100644
--- a/workflow-templates/diflow.yaml
+++ b/workflow-templates/diflow.yaml
@@ -30,4 +30,4 @@ jobs:
       - name: Diflow run (don't push)
         run: |
           cd diflow
-          node dist/diflow.js sync -r https://${SECRET}@github.com/dbgate/dbgate-diflow-config.git -b master --skip-push --secret ${{ secrets.GITHUB_TOKEN }}
+          node dist/diflow.js sync -r https://${SECRET}@github.com/dbgate/dbgate-diflow-config.git -b master --skip-push --secret "${{ secrets.GITHUB_TOKEN }}"