diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index 6410defdf..6cd7cba7a 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -268,7 +268,8 @@ jobs:
 
       - name: Compute SHA1 checksums
         run: |
-          for file in dist/*; do
+          cd dist
+          for file in *; do
             sha1sum "$file" > "$file.sha1"
           done
 
@@ -283,7 +284,7 @@ jobs:
         uses: actions/upload-artifact@v4
         with:
           name: signed-artifacts
-          path: dist/
+          path: dist
 
   update-github-release:
     name: Update GitHub release with SBOM and signed artifacts
@@ -302,6 +303,7 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: signed-artifacts
+          path: dist
 
       - name: Update Github release
         env: