diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1bb3a65..181613f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -128,7 +128,8 @@ jobs:
           # layout pilotctl installs.
           python3 scripts/pack-bundle.py stage "out/$ARCHIVE" "$(git log -1 --format=%ct)"
           tar -tvzf "out/$ARCHIVE"
-          shasum -a 256 "out/$ARCHIVE" > "out/$ARCHIVE.sha256"
+          # The bare file name: publish checks these from another dir.
+          (cd out && shasum -a 256 "$ARCHIVE" > "$ARCHIVE.sha256")
 
       - uses: actions/upload-artifact@v7
         with: