diff --git a/.github/workflows/vulnerability-scan.yml b/.github/workflows/vulnerability-scan.yml
index 4a0c56a4..4b1bc481 100644
--- a/.github/workflows/vulnerability-scan.yml
+++ b/.github/workflows/vulnerability-scan.yml
@@ -15,8 +15,8 @@ jobs:
     continue-on-error: true
     strategy:
       matrix:
-        images: ${{ vars.IMAGES }}
-        branches: ${{ vars.BRANCHES }}
+        images: ${{ fromJson(vars.IMAGES) }}
+        branches: ${{ fromJson(vars.BRANCHES) }}
     steps:
       - name: Scan for vulnerabilities
         id: scan