diff --git a/.gitea/workflows/staging_release.yml b/.gitea/workflows/staging_release.yml
index 48c94d94..870fe638 100644
--- a/.gitea/workflows/staging_release.yml
+++ b/.gitea/workflows/staging_release.yml
@@ -53,7 +53,7 @@ jobs:
           # Mapped from Gitea secrets/vars to .env.sample structure
           # Note: Common vars like DB_PORT do not have STAGE_ prefix in Gitea settings based on user input.
           # Secrets have STG_ prefix.
-          printf '%s\n' \
+          cat <<'EOF' > .env \
             "APP_ENV=stage" \
             "TZ=Asia/Seoul" \
             "IDP_PROVIDER=ory" \
@@ -119,7 +119,7 @@ jobs:
             "CSRF_COOKIE_SECRET=${{ secrets.STG_CSRF_COOKIE_SECRET }}" \
             "OATHKEEPER_INTROSPECT_CLIENT_ID=${{ vars.OATHKEEPER_INTROSPECT_CLIENT_ID }}" \
             "OATHKEEPER_INTROSPECT_CLIENT_SECRET=${{ secrets.STG_OATHKEEPER_INTROSPECT_CLIENT_SECRET }}" \
-            > .env
+            EOF
 
           # Copy artifacts to remote
           # Using compose.infra.yaml as base for staging (assuming simplified structure compared to prod)