diff --git a/.github/workflows/build-android.yml b/.github/workflows/build-android.yml
index 69d2208..1ae18f1 100644
--- a/.github/workflows/build-android.yml
+++ b/.github/workflows/build-android.yml
@@ -63,15 +63,20 @@ jobs:
             ${{ runner.os }}-gradle-
 
       - name: Decode keystore
+        env:
+          KEYSTORE_B64: ${{ secrets.KEYSTORE_B64 }}
+          KEYSTORE_ALIAS: ${{ secrets.KEYSTORE_ALIAS }}
+          KEYSTORE_STORE_PASSWORD: ${{ secrets.KEYSTORE_STORE_PASSWORD }}
+          KEYSTORE_KEY_PASSWORD: ${{ secrets.KEYSTORE_KEY_PASSWORD }}
         run: |
           mkdir -p ~/.config/sheethappens
-          echo "${{ secrets.KEYSTORE_B64 }}" | base64 -d > ~/.config/sheethappens/sheethappens.jks
-          cat > ~/.config/sheethappens/signing.env <<'EOF'
-          KEYSTORE_PATH=~/.config/sheethappens/sheethappens.jks
-          KEYSTORE_ALIAS=${{ secrets.KEYSTORE_ALIAS }}
-          KEYSTORE_STORE_PASSWORD=${{ secrets.KEYSTORE_STORE_PASSWORD }}
-          KEYSTORE_KEY_PASSWORD=${{ secrets.KEYSTORE_KEY_PASSWORD }}
-          EOF
+          echo "$KEYSTORE_B64" | base64 -d > ~/.config/sheethappens/sheethappens.jks
+          {
+            printf 'KEYSTORE_PATH=%s\n' "$HOME/.config/sheethappens/sheethappens.jks"
+            printf 'KEYSTORE_ALIAS=%s\n' "$KEYSTORE_ALIAS"
+            printf 'KEYSTORE_STORE_PASSWORD=%s\n' "$KEYSTORE_STORE_PASSWORD"
+            printf 'KEYSTORE_KEY_PASSWORD=%s\n' "$KEYSTORE_KEY_PASSWORD"
+          } > ~/.config/sheethappens/signing.env
           chmod 600 ~/.config/sheethappens/signing.env ~/.config/sheethappens/sheethappens.jks
 
       - name: Build signed APK