diff --git a/scripts/deploy.sh b/scripts/deploy.sh
index e3e0f46..3bfd813 100755
--- a/scripts/deploy.sh
+++ b/scripts/deploy.sh
@@ -148,7 +148,7 @@ if [ '${COMPOSE_UP[$TARGET]}' = '1' ]; then
     # serve a stale COPY --from layer (keyed on stage name), so a rebuild
     # always runs with --no-cache.
     cfhash=\$(sha256sum dankclaw/\$dir/Containerfile | cut -d' ' -f1)
-    oldhash=\$(podman image inspect \$img:latest --format '{{index .Config.Labels "cfhash"}}' 2>/dev/null || echo none)
+    oldhash=\$(podman image inspect \$img:latest --format '{{index .Config.Labels \"cfhash\"}}' 2>/dev/null || echo none)
     if [ \"\$oldhash\" != \"\$cfhash\" ]; then
       echo \"  \$img image missing or stale; building it...\"
       podman build --no-cache --label cfhash=\$cfhash -t \$img:latest -f dankclaw/\$dir/Containerfile .