diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index cb863d5e0e2..87bde33ba90 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -15,12 +15,14 @@ jobs:
   release:
     if: github.repository == 'grafana/tempo'  # skip in forks
     runs-on: ubuntu-24.04
+    env:
+      NFPM_SIGNING_KEY_FILE: /tmp/nfpm-private-key.key
     steps:
       - name: Checkout
         uses: actions/checkout@v4
 
       - name: fetch tags
-      - run: git fetch --tags
+        run: git fetch --tags
 
       - id: "get-secrets"
         name: "get nfpm signing keys"
@@ -32,18 +34,17 @@ jobs:
 
       - name: write-key
         run: printf "%s" "$NFPM_SIGNING_KEY" > $NFPM_SIGNING_KEY_FILE
-        env:
-          NFPM_SIGNING_KEY_FILE: /tmp/nfpm-private-key.key
 
       - name: test release
         run: make release-snapshot
 
       - name: test deb package
         run: |
+          ls -l ./dist
           docker run --name debcontainer -it --detach jrei/systemd-debian:12 /bin/sh
-          docker cp ./dist/tempo*_amd64.deb debcontainer:.
+          docker cp ./dist/tempo_*_linux_amd64.deb debcontainer:.
           docker cp ./tools/packaging/wait-for-ready.sh debcontainer:.
-          docker exec debcontainer dpkg -i ./tempo*_amd64.deb
+          docker exec debcontainer dpkg -i ./dist/tempo_*_linux_amd64.deb
           docker exec debcontainer [ "$(systemctl is-active tempo)" = "active" ] || (echo "tempo is inactive" && exit 1)
           docker exec debcontainer apt update && apt install -y curl
           docker exec debcontainer ./wait-for-ready.sh)