diff --git a/gi-find-deps.sh b/gi-find-deps.sh
index f34791c..34b4488 100755
--- a/gi-find-deps.sh
+++ b/gi-find-deps.sh
@@ -149,7 +149,7 @@ oldIFS=$IFS
 IFS=:
 for file in "$jspkg"; do
 	IFS=$'\n'
-	PKGS=$(pcre2grep -M "pkg.require\\(([^;])*" $file | grep -o -E "'?.*'?: '.*'")
+	PKGS=$(pcre2grep -M "pkg.require\\(([^;])*" "$file" | grep -o -E "'?.*'?: '.*'")
 	for pkg in $PKGS; do
 		split_name_version2 $pkg
 		found=0
@@ -212,7 +212,7 @@ function find_requires {
 #   . The imports can be listed on one line, and we catch them.
 
 while read file; do
-	case $file in
+	case "$file" in
 		*.js)
 			javascript_requires "$file"
 			;;
@@ -226,7 +226,7 @@ while read file; do
 			gresources_requires "$file"
 			;;
 		*)
-			case $(file -b $file) in
+			case $(file -b "$file") in
 				*[Pp]ython*script*)
 					python_requires "$file"
 					;;