diff --git a/.sops/sops-setup.sh b/.sops/sops-setup.sh
old mode 100644
new mode 100755
index f722e4a1..4658f741
--- a/.sops/sops-setup.sh
+++ b/.sops/sops-setup.sh
@@ -18,7 +18,7 @@ else
 fi
 
 # Configure the git filters
-git config --local filter.sops.smudge $SOPS_DIR/decrypt-filter.sh %f
-git config --local filter.sops.clean $SOPS_DIR/encrypt-filter.sh %f
+git config --local filter.sops.smudge "$SOPS_DIR/decrypt-filter.sh %f"
+git config --local filter.sops.clean "$SOPS_DIR/encrypt-filter.sh %f"
 git config --local filter.sops.required true
 git config --local diff.sops.textconv "sops decrypt"
\ No newline at end of file