diff --git a/circleci/docker-publish b/circleci/docker-publish
index a280ba7..3d6acaf 100755
--- a/circleci/docker-publish
+++ b/circleci/docker-publish
@@ -65,7 +65,7 @@ push_hub_image $1 $2 $3 $4
 
 # TODO: fail if ECR_PUSH_ID is not set;
 # all repos eventually should dual publish (or explicitly opt-out)
-if [ $ECR_PUSH_ID != "" ]; then
+if [ "$ECR_PUSH_ID" != "" ]; then
   echo "ECR access_id available. Pushing to ECR..."
   push_ecr_image
 fi