diff --git a/plugin.sh b/plugin.sh
index 3590d11..ca1ca0f 100755
--- a/plugin.sh
+++ b/plugin.sh
@@ -21,7 +21,7 @@ generate_secrets() {
   export DOCKER_HOST="ssh://$PLUGIN_USER@$PLUGIN_HOST:$PLUGIN_PORT"
 
   for SECRET in $(yq r "$PLUGIN_COMPOSE" 'secrets.*.name'); do 
-    if ! docker secret ls | grep $SECRET; then
+    if ! docker secret ls | grep "$SECRET"; then
       eval "echo \"generating $SECRET\""
       PW=$(</dev/urandom tr -dc 'A-Za-z0-9' | head -c 40; echo)
       eval "echo \"$PW\" | docker secret create \"$SECRET\" -";