diff --git a/plugin-runtime/scripts/generate-sea.cjs b/plugin-runtime/scripts/generate-sea.cjs
index b47b83a6..76feac43 100644
--- a/plugin-runtime/scripts/generate-sea.cjs
+++ b/plugin-runtime/scripts/generate-sea.cjs
@@ -5,8 +5,8 @@ const pluginRuntimeDir = path.join(__dirname, '..');
 const destDir = path.join(__dirname, '..', '..', 'src-tauri', 'vendored', 'plugin-runtime');
 const blobPath = path.join(pluginRuntimeDir, 'yaak-plugins.blob');
 
-const WIN_SIGNTOOL = 'C:/Program Files (x86)/Windows Kits/10/bin/10.0.17763.0/x86/signtool.exe';
-
+// https://federicoterzi.com/blog/automatic-codesigning-on-windows-using-github-actions/
+const WIN_SIGNTOOL = "'C:/Program Files (x86)/Windows Kits/10/bin/10.0.17763.0/x86/signtool.exe'";
 
 const DST_BIN_MAP = {
   darwin_arm64: 'yaakplugins-aarch64-apple-darwin',