diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d4ffb57c..50b1a4d8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -34,7 +34,10 @@ jobs:
 
   lint-secretlint:
     name: Lint Secretlint
-    runs-on: ubuntu-24.04
+    strategy:
+      matrix:
+        os: [ubuntu-latest, windows-latest, macos-latest]
+    runs-on: ${{ matrix.os }}
     timeout-minutes: 10
     steps:
     - uses: actions/checkout@v4
diff --git a/package.json b/package.json
index 96a07eea..a7202093 100644
--- a/package.json
+++ b/package.json
@@ -16,7 +16,7 @@
     "lint": "npm run lint-biome && npm run lint-ts && npm run lint-secretlint",
     "lint-biome": "biome check --write",
     "lint-ts": "tsc --noEmit",
-    "lint-secretlint": "secretlint '**/*'",
+    "lint-secretlint": "secretlint \"**/*\"",
     "test": "vitest",
     "test-coverage": "vitest run --coverage",
     "cli-run": "npm run build && node --trace-warnings bin/repopack",