diff --git a/.github/workflows/release-cli-assets.yml b/.github/workflows/release-cli-assets.yml
index 83c1c484b..14af92aa9 100644
--- a/.github/workflows/release-cli-assets.yml
+++ b/.github/workflows/release-cli-assets.yml
@@ -83,6 +83,16 @@ jobs:
           security set-key-partition-list -S apple-tool:,apple: -k "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
           security list-keychain -d user -s $KEYCHAIN_PATH
 
+      - name: Install debian certificate
+        if: matrix.os == 'ubuntu-latest'
+        env:
+          DEBIAN_GPG_KEY: ${{ secrets.DEBIAN_GPG_KEY }}
+        run: |
+          # import certificate from secrets
+          echo -n "$DEBIAN_GPG_KEY" >> $RUNNER_TEMP/key.gpg
+
+          gpg --import $RUNNER_TEMP/key.gpg
+
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
@@ -110,6 +120,7 @@ jobs:
           MATRIX_OS: ${{ matrix.os }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           COMMIT_SHA: ${{ inputs.commitSha }}
+          XATA_DEB_KEY: ${{ secrets.DEBIAN_GPG_KEY_ID }}
 
       - name: Clean up keychain
         if: matrix.os == 'macos-latest'
diff --git a/scripts/release-cli.ts b/scripts/release-cli.ts
index 59ea9b15a..4bd455954 100644
--- a/scripts/release-cli.ts
+++ b/scripts/release-cli.ts
@@ -82,17 +82,15 @@ async function main() {
   execFile('rm', ['-rf', `${PATH_TO_CLI}/npm-shrinkwrap.json`]);
   execFile('touch', [`${PATH_TO_CLI}/npm-shrinkwrap.json`]);
 
-  const platform = matrixToOclif(process.env.MATRIX_OS);
-
   // Tarballs
-  await exec(`pnpm oclif pack tarballs --targets=${platformDistributions(platform)}`);
+  await exec(`pnpm oclif pack tarballs --targets=${platformDistributions(operatingSystem)}`);
   //Packages
-  await exec(`pnpm oclif pack ${platform}`);
+  await exec(`pnpm oclif pack ${operatingSystem}`);
   // Upload Tarballs
-  await uploadS3(platform);
+  await uploadS3(operatingSystem);
   // Upload packages
-  await uploadS3(platform, { pkg: true });
-  await promoteS3(platform, version);
+  await uploadS3(operatingSystem, { pkg: true });
+  await promoteS3(operatingSystem, version);
 
   const octokit = new Octokit({
     auth: process.env.GITHUB_TOKEN