diff --git a/.github/workflows/emu-build-all-linux.yml b/.github/workflows/emu-build-all-linux.yml
index 2e33c3d4..eaf0e35a 100644
--- a/.github/workflows/emu-build-all-linux.yml
+++ b/.github/workflows/emu-build-all-linux.yml
@@ -57,8 +57,8 @@ jobs:
         id: "emu-deps-cache-step"
         uses: actions/cache@v4
         with:
-          key: ${{ env.DEPS_CACHE_KEY }}-${{ env.PREMAKE_ACTION }}
-          path: ${{ env.DEPS_CACHE_DIR }}/${{ env.PREMAKE_ACTION }}
+          key: "${{ env.DEPS_CACHE_KEY }}-${{ env.PREMAKE_ACTION }}"
+          path: "${{ env.DEPS_CACHE_DIR }}/${{ env.PREMAKE_ACTION }}"
 
       # extra helpers/tools, these are not built inside the deps build dir
       - name: "Clone third-party build helpers (common/linux)"
diff --git a/.github/workflows/emu-build-all-win.yml b/.github/workflows/emu-build-all-win.yml
index e05a8f9e..c794d1dc 100644
--- a/.github/workflows/emu-build-all-win.yml
+++ b/.github/workflows/emu-build-all-win.yml
@@ -54,7 +54,7 @@ jobs:
       # on Windows Git will auto change line ending to CRLF, not preferable
       - name: "Ensure LF line ending"
         shell: "cmd"
-        working-directory: ${{ github.workspace }}
+        working-directory: "${{ github.workspace }}"
         run: |
           git config --local core.autocrlf false
           git config --system core.autocrlf false
diff --git a/.github/workflows/migrate_gse-pull-request.yml b/.github/workflows/migrate_gse-pull-request.yml
index 77257a62..f4f113e7 100644
--- a/.github/workflows/migrate_gse-pull-request.yml
+++ b/.github/workflows/migrate_gse-pull-request.yml
@@ -14,9 +14,9 @@ jobs:
   script-win:
     name: "Migrate GSE win"
     if: ${{ !cancelled() }}
-    uses: ./.github/workflows/migrate_gse-build-win.yml
+    uses: "./.github/workflows/migrate_gse-build-win.yml"
 
   script-linux:
     name: "Migrate GSE linux"
     if: ${{ !cancelled() }}
-    uses: ./.github/workflows/migrate_gse-build-linux.yml
+    uses: "./.github/workflows/migrate_gse-build-linux.yml"
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7974417e..a665914a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -127,7 +127,7 @@ jobs:
       # fix folder permissions! not sure why this fails
       # nested subdirs "build/linux/release" cause permission problems
       - name: "Give all permissions to repo folder"
-        shell: bash
+        shell: "bash"
         working-directory: "${{ github.workspace }}"
         run: sudo chmod -R 777 "${{ github.workspace }}" && sudo chmod 777 package_linux.sh