diff --git a/build-scripts/hack/sync-registry.yaml b/build-scripts/hack/sync-registry.yaml
index becd2bedb..8b04c88f3 100644
--- a/build-scripts/hack/sync-registry.yaml
+++ b/build-scripts/hack/sync-registry.yaml
@@ -1,8 +1,8 @@
 version: 1
 creds:
   - registry: ghcr.io/canonical
-    user: {{env "USERNAME"}}
-    pass: {{env "TOKEN"}}
+    user: "{{env \"USERNAME\"}}"
+    pass: "{{env \"TOKEN\"}}"
 sync:
   - source: registry.k8s.io/pause:3.7
     target: ghcr.io/canonical/pause:3.7