diff --git a/pipelines/build/common/sign_temurin_jsf.groovy b/pipelines/build/common/sign_temurin_jsf.groovy
index cb70594d2..9cd903d59 100644
--- a/pipelines/build/common/sign_temurin_jsf.groovy
+++ b/pipelines/build/common/sign_temurin_jsf.groovy
@@ -65,7 +65,7 @@ stage('Signing SBOM') {
                 // Sign SBOMS
                 sh ''' 
                     cd artifacts
-                    for ARTIFACT in $(find . -name *sbom*.json | grep -v metadata.json); do
+                    for ARTIFACT in $(find . -name "*sbom*.json" | grep -v metadata.json); do
                     echo "Signing ${ARTIFACT}"
                     java -cp "cyclonedx-lib/build/jar/*" temurin.sbom.TemurinSignSBOM --verbose --signSBOM --jsonFile "${ARTIFACT}" --privateKeyFile "$PRIVATE_KEY"