diff --git a/scripts/sdist-sign b/scripts/sdist-sign
index 50758a30..1186bdee 100755
--- a/scripts/sdist-sign
+++ b/scripts/sdist-sign
@@ -17,4 +17,4 @@ python setup.py sdist
 
 D=dist/borgbackup-$R.tar.gz
 
-$GPG --detach-sign --local-user "Thomas Waldmann" --armor --output $D.asc $D
+$GPG --detach-sign --local-user "Thomas Waldmann" --armor --output "$D.asc" "$D"
diff --git a/scripts/sign-binaries b/scripts/sign-binaries
index 4f145be7..ecbefda1 100755
--- a/scripts/sign-binaries
+++ b/scripts/sign-binaries
@@ -14,7 +14,7 @@ else
 fi
 
 for file in dist/borg-*; do
-    $GPG --local-user "Thomas Waldmann" --armor --detach-sign --output $file.asc $file
+    $GPG --local-user "Thomas Waldmann" --armor --detach-sign --output "$file.asc" "$file"
 done
 
-touch -t $D dist/*
+touch -t "$D" dist/*
diff --git a/scripts/upload-pypi b/scripts/upload-pypi
index db0ef45f..618e36f8 100755
--- a/scripts/upload-pypi
+++ b/scripts/upload-pypi
@@ -15,4 +15,4 @@ fi
 
 D=dist/borgbackup-$R.tar.gz
 
-twine upload $D.asc $D
+twine upload "$D.asc" "$D"