diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 788f9f82a..27583f64c 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -84,13 +84,8 @@ jobs:
           export GPG_TTY=""
           export GNUPGHOME=/root/.gnupg
           # repo-add wants explicit passphrase; wrap via gpg-agent loopback
-          cat > /root/.gnupg/gpg.conf <<EOF
-pinentry-mode loopback
-passphrase-file /root/repo_pass
-EOF
-          cat > /root/.gnupg/gpg-agent.conf <<EOF
-allow-loopback-pinentry
-EOF
+          printf 'pinentry-mode loopback\npassphrase-file /root/repo_pass\n' > /root/.gnupg/gpg.conf
+          printf 'allow-loopback-pinentry\n' > /root/.gnupg/gpg-agent.conf
           gpg-connect-agent reloadagent /bye
           repo-add --new --sign --key 92D5E96D8F63C75E4116AA1FF5C8C4603D0D250C \
             --verify marfrit.db.tar.gz *.pkg.tar.*