diff --git a/forgejo-release.sh b/forgejo-release.sh
index 1f19feb..7b3a64f 100755
--- a/forgejo-release.sh
+++ b/forgejo-release.sh
@@ -172,7 +172,7 @@ download() {
         echo "Downloading tagged release ${TAG}"
         api GET repos/$REPO/releases/tags/"$TAG" > "$TMP_DIR"/assets.json
     fi
-     jq --raw-output '.assets[] | "\(.browser_download_url) \(.name)"' < "$TMP_DIR"/assets.json | while read url name  ; do
+     jq --raw-output '.assets[] | "\(.browser_download_url) \(.name)"' < "$TMP_DIR"/assets.json | while read url name  ; do  # `name` may contain whitespace, therefore, it must be last
        curl --fail -H "Authorization: token $TOKEN" -o "$name" -L "$url"
      done
     )