diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index e57f23e..abb5fa5 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -132,10 +132,19 @@ jobs:
           name: xplora_watch-signed
           path: |
             xplora_watch.zip
-            xplora_watch.zip.*
+            xplora_watch.zip.intoto.jsonl
+            xplora_watch.zip.sig
             !cosign.*
 
-      - name: Create Release
+      - name: Download signed artifacts
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
+        with:
+          name: xplora_watch-signed
+
+      - name: Display structure of downloaded files
+        run: ls -R
+
+      - name: Upload binaries, attestations and signatures to Release and create GitHub Release
         if: steps.checkTag.outputs.exists == 'false'
         uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2.2.1
         with:
@@ -145,3 +154,7 @@ jobs:
           prerelease: false
           token: ${{ secrets.GITHUB_TOKEN }}
           generate_release_notes: true
+          files: |
+            xplora_watch.zip
+            xplora_watch.zip.intoto.jsonl
+            xplora_watch.zip.sig