surround in quotes

Author: baileympearson

node/sign_node_package/action.yml

@@ -59,9 +59,7 @@ runs:
         FILENAMES=$(find build-* -type f -name '*.tar.gz')
         FILENAMES=$(echo "$FILENAMES")
         FILENAMES="$FILENAMES ${{ env.package_file }}"
-
-        echo $FILENAMES
-        echo "FILES_TO_SIGN=$FILENAMES" >> "$GITHUB_ENV"
+        echo "FILES_TO_SIGN='$FILENAMES'" | tee $GITHUB_ENV
 
     - name: Determine what files to sign (non-native packages, with only the release tarball)
       if: ${{ inputs.sign_native != 'true' }}