diff --git a/.github/scripts/strategy-matrix/generate.py b/.github/scripts/strategy-matrix/generate.py
index 29d7ba43fd..e09e370009 100755
--- a/.github/scripts/strategy-matrix/generate.py
+++ b/.github/scripts/strategy-matrix/generate.py
@@ -319,7 +319,7 @@ def addSanitizerConfigs(
         # before CMake processes it. This ensures the compiler receives an absolute path.
         # CMAKE_SOURCE_DIR won't work here because it's inside CMAKE_CXX_FLAGS string.
         # GCC doesn't support ignorelist.
-        cxx_flags += " -fsanitize-ignorelist=$GITHUB_WORKSPACE/sanitizers/suppressions/sanitizer-ignorelist.txt"
+        cxx_flags += ' "-fsanitize-ignorelist=$GITHUB_WORKSPACE/sanitizers/suppressions/sanitizer-ignorelist.txt"'
         sanitizers_flags = (
             f"{sanitizers_flags},signed-integer-overflow,unsigned-integer-overflow"
         )