diff --git a/lib/build/Makefile.docker_image b/lib/build/Makefile.docker_image
index d3be9446..67c522eb 100644
--- a/lib/build/Makefile.docker_image
+++ b/lib/build/Makefile.docker_image
@@ -74,18 +74,18 @@ promote_image: $(HOME)/.docker/cli-plugins/docker-buildx
 
 	# update dockerhub README
 	[ -s /usr/bin/jq ] || apk add jq
-	@JSON=$(jq -n --arg pwd "$DOCKER_TOKEN" --arg user "$USER_LOGIN" \
+	@JSON=$$(jq -n --arg pwd "$(DOCKER_TOKEN)" --arg user "$(USER_LOGIN)" \
 	  '{username: $user, password: $pwd}')
-	@JWT=$(curl -s -H "Content-Type: application/json" -X POST \
-	  -d "$JSON" https://hub.docker.com/v2/users/login/ |jq -r .token)
+	@JWT=$$(curl -s -H "Content-Type: application/json" -X POST \
+	  -d "$$JSON" https://hub.docker.com/v2/users/login/ |jq -r .token)
 	# Build JSON payload securely and send PATCH request
 	# jq --arg escapes special characters / newlines in markdown text
-	RESP=$(jq -n --arg desc "$(<README.md)" '{"full_description": $desc}' | \
+	RESP=$$(jq -n --arg desc "$(<README.md)" '{"full_description": $desc}' | \
 	  curl -s -o /dev/null -w "%{http_code}" -X PATCH \
 	  -H "Content-Type: application/json" \
-	  -H "Authorization: JWT $JWT_TOKEN" \
+	  -H "Authorization: JWT $$JWT" \
 	  -d @- https://hub.docker.com/v2/repositories/$(IMAGE_REPO)/
-	[ "$RESPONSE_CODE" -eq 200 ] || exit 1
+	[ "$$RESP" -eq 200 ] || exit 1
 
 flake8: test_requirements
 	@echo "Running flake8 code analysis"