diff --git a/.github/workflows/vulnix.yml b/.github/workflows/vulnix.yml
index 13a5440..60f797c 100644
--- a/.github/workflows/vulnix.yml
+++ b/.github/workflows/vulnix.yml
@@ -25,7 +25,7 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           API: ${{ github.api_url }}
           REPO: ${{ github.repository }}
-        run: nix run -L .#ci -- upsert-issue vulnix "vulnix: known vulnerabilities in system closure" "$RUNNER_TEMP/issue.md"
+        run: 'nix run -L .#ci -- upsert-issue vulnix "vulnix: known vulnerabilities in system closure" "$RUNNER_TEMP/issue.md"'
 
       - name: close resolved issue
         if: steps.scan.outputs.count == '0'