diff --git a/.github/workflows/reproducible-builds.yml b/.github/workflows/reproducible-builds.yml
index 5a64ad797a..f6a1c462cf 100644
--- a/.github/workflows/reproducible-builds.yml
+++ b/.github/workflows/reproducible-builds.yml
@@ -135,27 +135,27 @@ jobs:
             - "cli_enterprise_windows_amd64"
     runs-on: ubuntu-22.04
     steps:
-        - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
-          with:
-            ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
-
-        - name: Download binaries
-          uses: ./.github/actions/artifact_download
-          with:
-            name: "binaries-${{ matrix.target }}"
-            encryptionSecret: ${{ secrets.ARTIFACT_ENCRYPT_PASSWD }}
-
-        - name: Hash
-          shell: bash
-          if: runner.os == 'Linux'
-          run: sha256sum cli_enterprise*
-
-        - name: Compare binaries
-          shell: bash
-          run: |
-            # shellcheck disable=SC2207,SC2116
-            list=($(echo "cli_enterprise*"))
-            diff -s --to-file="${list[0]}" "${list[@]:1}" | tee "${GITHUB_STEP_SUMMARY}"
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
+        with:
+          ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
+
+      - name: Download binaries
+        uses: ./.github/actions/artifact_download
+        with:
+          name: "binaries-${{ matrix.target }}"
+          encryptionSecret: ${{ secrets.ARTIFACT_ENCRYPT_PASSWD }}
+
+      - name: Hash
+        shell: bash
+        if: runner.os == 'Linux'
+        run: sha256sum cli_enterprise*
+
+      - name: Compare binaries
+        shell: bash
+        run: |
+          # shellcheck disable=SC2207,SC2116
+          list=($(echo "cli_enterprise*"))
+          diff -s --to-file="${list[0]}" "${list[@]:1}" | tee "${GITHUB_STEP_SUMMARY}"
 
   compare-osimages:
     needs: build-osimages
@@ -169,24 +169,24 @@ jobs:
               - "gcp_gcp-sev-snp_nightly"
     runs-on: ubuntu-22.04
     steps:
-        - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
-          with:
-            ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
-
-        - name: Download os images
-          uses: ./.github/actions/artifact_download
-          with:
-            name: "osimages-${{ matrix.target }}"
-            encryptionSecret: ${{ secrets.ARTIFACT_ENCRYPT_PASSWD }}
-
-        - name: Hash
-          shell: bash
-          if: runner.os == 'Linux'
-          run: sha256sum osimage-*
-
-        - name: Compare os images
-          shell: bash
-          run: |
-            # shellcheck disable=SC2207,SC2116
-            list=($(echo "osimage-*"))
-            diff -s --to-file="${list[0]}" "${list[@]:1}" | tee "${GITHUB_STEP_SUMMARY}"
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
+        with:
+          ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
+
+      - name: Download os images
+        uses: ./.github/actions/artifact_download
+        with:
+          name: "osimages-${{ matrix.target }}"
+          encryptionSecret: ${{ secrets.ARTIFACT_ENCRYPT_PASSWD }}
+
+      - name: Hash
+        shell: bash
+        if: runner.os == 'Linux'
+        run: sha256sum osimage-*
+
+      - name: Compare os images
+        shell: bash
+        run: |
+          # shellcheck disable=SC2207,SC2116
+          list=($(echo "osimage-*"))
+          diff -s --to-file="${list[0]}" "${list[@]:1}" | tee "${GITHUB_STEP_SUMMARY}"