diff --git a/bob/devtools/data/gitlab-ci/single-package.yaml b/bob/devtools/data/gitlab-ci/single-package.yaml
index 20c40fadfe9b0cf47fc38bd6bace28499563ecd1..bb072678e8cb8597c70781e7c7dd19e7ac1122a8 100644
--- a/bob/devtools/data/gitlab-ci/single-package.yaml
+++ b/bob/devtools/data/gitlab-ci/single-package.yaml
@@ -26,7 +26,7 @@ stages:
     # for conda inspect during builds (on macos)
     - conda activate base
     - echo "CI_RUNNER_TAGS = '${CI_RUNNER_TAGS}'"
-    - if [[ ${CI_RUNNER_TAGS} =~ bob.*docker\|docker.*bob ]]; then echo "YES!!"; git config --global --add safe.directory ${CI_PROJECT_DIR}; fi
+    - if [[ "$CI_RUNNER_TAGS" =~ bob.*docker\|docker.*bob ]]; then echo "YES!!"; git config --global --add safe.directory ${CI_PROJECT_DIR}; fi
     - bdt ci check -vv
   cache:
     paths: