diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 9f23dee..ff04450 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -60,7 +60,6 @@ jobs:
         args: release --clean
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        GITHUB_SBOM_PATH: ./sbom.spdx.json
     # attest artefacts
     - uses: actions/attest-build-provenance@db473fddc028af60658334401dc6fa3ffd8669fd # v2.3.0
       with:
diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index b8b2b7b..3d51e6f 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -83,5 +83,5 @@ docker_manifests:
 
 release:
   extra_files:
-  - glob: "{{ .Env.GITHUB_SBOM_PATH }}"
+  - glob: ./sbom.spdx.json
     name_template: "{{ .ProjectName }}.v{{ .Version }}.sbom.spdx.json"