diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index cae0eb5..9e03607 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -349,26 +349,27 @@ jobs:
       - uses: actions/checkout@v4
         with:
           persist-credentials: false
-      - run: mkdir -p dist out
+      - run: mkdir -p dist/out
       - run: echo -n '${{ github.sha }}' > dist/commit-sha.txt
       - run: mv {compose.yaml,config.toml,LICENSE} dist/
       - name: Create Dockerfile
         run: |
-          echo "# syntax=docker.io/docker/dockerfile:1
+          cat << 'EOF' > dist/Dockerfile
+          # syntax=docker.io/docker/dockerfile:1
 
           FROM ghcr.io/${{ github.repository }}:${{ github.sha }}
 
-          ARG \\
-            UID=1000 \\
+          ARG \
+            UID=1000 \
             GID=1000
 
           USER root
 
-          RUN groupmod --gid \"\$${GID}\" app \\
-            && usermod --uid \"\$${UID}\" --gid \"\$${GID}\" app
+          RUN groupmod --gid "${GID}" app \
+            && usermod --uid "${UID}" --gid "${GID}" app
 
           USER app
-          " > dist/Dockerfile
+          EOF
       - uses: actions/attest-build-provenance@v2
         with:
           subject-path: dist
@@ -393,7 +394,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           persist-credentials: false
-      - run: mkdir -p dist out
+      - run: mkdir -p dist/out
       - run: echo -n '${{ github.sha }}' > dist/commit-sha.txt
       - run: mv {src,Cargo.lock,Cargo.toml,compose.yaml,config.toml,Dockerfile,LICENSE} dist/
       - uses: actions/attest-build-provenance@v2