diff --git a/plugin.sh b/plugin.sh
index 919177a..2d41fc8 100755
--- a/plugin.sh
+++ b/plugin.sh
@@ -31,7 +31,8 @@ generate_secrets() {
   wget https://github.com/mikefarah/yq/releases/download/${VERSION}/${BINARY} -O /usr/bin/yq &&\
     chmod +x /usr/bin/yq
 
-  for SECRET in $(yq r "$PLUGIN_COMPOSE" 'secrets.*.name'); do
+  # shellcheck disable=SC2086
+  for SECRET in $(yq r ${PLUGIN_COMPOSE//:/ } 'secrets.*.name'); do
     SECRET=$(eval echo "$SECRET")
     if docker -H "$REMOTE_DOCKER_HOST" secret ls | grep -q "$SECRET"; then
       echo "Skipping existing secret $SECRET"