diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index aa4d9a2963d2932d0364e5dd4aa4df0c1d2458c0..1ae627b06b2aebf71055c52d2b31e75436868f39 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -21,11 +21,11 @@ sync_mirror:
     - staging
   allow_failure: true
   script:
-    - git clone --bare $CI_BUILD_REPO mirror.git
+    - git clone --bare "$CI_BUILD_REPO" mirror.git
     - cd mirror.git
     - git update-ref -d refs/tags/production
     - git update-ref -d refs/tags/staging
-    - git push --mirror $MIRROR_REPO
+    - git push --mirror "$MIRROR_REPO"
 
 sonar:
   stage: analysis
@@ -66,11 +66,11 @@ tomcat_production:
   only:
     - production
   script:
-    - curl --upload-file $WAR_FILE https://$PROD_TOMCAT_USER:$PROD_TOMCAT_PASSWORD@$PROD_TOMCAT_HOST/manager/deploy?path=%2Fapi
+    - curl --upload-file "$WAR_FILE" "https://$PROD_TOMCAT_USER:$PROD_TOMCAT_PASSWORD@$PROD_TOMCAT_HOST/manager/deploy?path=%2Fapi"
 
 tomcat_development:
   stage: deploy
   only:
     - staging
   script:
-    - curl --upload-file $WAR_FILE https://$DEV_TOMCAT_USER:$DEV_TOMCAT_PASSWORD@$DEV_TOMCAT_HOST/manager/deploy?path=%2Fapi
+    - curl --upload-file "$WAR_FILE" "https://$DEV_TOMCAT_USER:$DEV_TOMCAT_PASSWORD@$DEV_TOMCAT_HOST/manager/deploy?path=%2Fapi"