diff --git a/.github/workflows/build-binaries.yml b/.github/workflows/build-binaries.yml
index 01a6a515c..062f50bf1 100644
--- a/.github/workflows/build-binaries.yml
+++ b/.github/workflows/build-binaries.yml
@@ -54,10 +54,10 @@ jobs:
 
       - name: Setup mac certificate
         if: runner.os == 'macOS'
-        run: ./build/setup-mac-certificate.sh
         env:
           MAC_CERTIFICATE: ${{ secrets.MAC_CERTIFICATE }}
           MAC_CERTIFICATE_PASSWORD: ${{ secrets.MAC_CERTIFICATE_PASSWORD }}
+        run: ./build/setup-mac-certificate.sh
 
       - name: Build mac production binaries
         if: runner.os == 'macOS'
diff --git a/build/setup-mac-certificate.sh b/build/setup-mac-certificate.sh
index a8ec903c2..60d964b0c 100755
--- a/build/setup-mac-certificate.sh
+++ b/build/setup-mac-certificate.sh
@@ -1,15 +1,15 @@
 #!/usr/bin/env bash
 
 if [ -z "$MAC_CERTIFICATE" ]; then
+  echo "MAC_CERTIFICATE not set. Ignoring."
+else
   export CSC_LINK="$MAC_CERTIFICATE"
   echo "MAC_CERTIFICATE found."
-else
-  echo "MAC_CERTIFICATE not set. Ignoring."
 fi
 
 if [ -z "$MAC_CERTIFICATE_PASSWORD" ]; then
+  echo "MAC_CERTIFICATE_PASSWORD not set. Ignoring."
+else
   export CSC_KEY_PASSWORD="$MAC_CERTIFICATE_PASSWORD"
   echo "MAC_CERTIFICATE_PASSWORD found."
-else
-  echo "MAC_CERTIFICATE_PASSWORD not set. Ignoring."
 fi