diff --git a/.github/workflows/release-github.yml b/.github/workflows/release-github.yml
index 7a31604..bcaad36 100644
--- a/.github/workflows/release-github.yml
+++ b/.github/workflows/release-github.yml
@@ -11,6 +11,7 @@ permissions:
 jobs:
   build:
     permissions:
+      id-token: write # This is required for requesting the JWT
       contents: write  # for goreleaser/goreleaser-action to create a GitHub release
     name: Release notation-alibabacloud.secretmanager.plugin binaries
     runs-on: ubuntu-20.04
@@ -26,7 +27,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v4
         with:
-          go-version: 1.20
+          go-version: '1.20'
         env:
           GOPATH: ${{ env.HOME }}
       - name: Set GoReleaser Previous Tag To Be Last Non Weekly Release
@@ -54,4 +55,4 @@ jobs:
           ./cputil --endpoint=oss-cn-hangzhou.aliyuncs.com \
                    --bucket '${{ secrets.OSS_BUCKET_NAME }}' \
                    --objectdir '${{ secrets.OSS_OBJECT_DIR }}/${{ github.ref_name }}' \
-                   dist/notation-alibabacloud-secretmanager*.tar.gz dist/checksums.txt
+                   dist/notation-alibabacloud-secret-manager*.tar.gz dist/checksums.txt