diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0531ebc9..63b37405 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -299,7 +299,7 @@ jobs:
           ls -lAR ./automated-release-build/
 
           # create checksum file for the attestations
-          shasum --algorithm 256 ./automated-release-build/* | tee ./attestation-subject-checksums.sha256.txt
+          shasum --algorithm 256 ./automated-release-build/* | tee ./dist/attestation-subject-checksums.sha256.txt
 
           # create checksum file for the release
           cd ./automated-release-build/
@@ -308,7 +308,7 @@ jobs:
       - name: Attest Build Provenance
         uses: actions/attest-build-provenance@v2
         with:
-          subject-checksums: ./attestation-subject-checksums.sha256.txt
+          subject-checksums: ./dist/attestation-subject-checksums.sha256.txt
 
       - name: Draft Release
         uses: goreleaser/goreleaser-action@v6
diff --git a/.gitignore b/.gitignore
index a830fe64..4566b841 100644
--- a/.gitignore
+++ b/.gitignore
@@ -2,7 +2,7 @@
 .idea
 .vscode
 *.db
-automated-release-build
+/automated-release-build/
 etc/dev.yml
 etc/dev-frontend.yml
 
@@ -10,7 +10,7 @@ etc/dev-frontend.yml
 node_modules/
 
 # Artifacts
-dist/
+/dist/
 
 # Generated files
 .docusaurus