From 2d6fc15fde4ff2290f7a2f20d044183cadfa8ecd Mon Sep 17 00:00:00 2001
From: Chris Farhood <chris@farhood.org>
Date: Thu, 12 Feb 2026 15:08:10 -0500
Subject: [PATCH] fix: explicitly specify tarball name instead of glob

---
 .github/workflows/release.yaml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 0990fc2..6c3a98a 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -54,7 +54,13 @@ jobs:
       - name: Move tarball to root
         working-directory: ./headlamp-sealed-secrets
         run: |
-          TARBALL=$(ls *.tar.gz)
+          # Get the specific tarball created by package command
+          TARBALL="headlamp-sealed-secrets-${{ steps.extract_version.outputs.version }}.tar.gz"
+          if [ ! -f "${TARBALL}" ]; then
+            echo "::error::Expected tarball ${TARBALL} not found"
+            ls -la *.tar.gz
+            exit 1
+          fi
           mv "${TARBALL}" "../${TARBALL}"
           echo "Moved tarball: ${TARBALL}"