diff --git a/.forgejo/workflows/deploy.yaml b/.forgejo/workflows/deploy.yaml
index 7ed5451..8544214 100644
--- a/.forgejo/workflows/deploy.yaml
+++ b/.forgejo/workflows/deploy.yaml
@@ -6,7 +6,7 @@ name: deploy
 # Secrets: SSH_DEPLOY_KEY (user deploy on both servers) and
 # ANSIBLE_VAULT_PASSWORD (decrypts inventory/group_vars/all/vault.yaml).
 
-run-name: ${{ github.ref == 'refs/heads/main' && 'apply' || 'dry run' }}: ${{ github.ref_name }}
+run-name: "${{ github.ref == 'refs/heads/main' && 'apply' || 'dry run' }}: ${{ github.ref_name }}"
 
 on:
   push: