diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b613fdce00..4a4fd75e52 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -182,9 +182,17 @@ jobs:
         run: |
           nix run .#push-coordinator -- "$container_registry/nunki/coordinator"
           nix run .#push-initializer -- "$container_registry/nunki/initializer"
+      - name: Update coordinator policy hash
+        run: |
+          nix run .#update-coordinator-policy-hash -- "$container_registry/nunki/coordinator:${{ needs.process-inputs.outputs.FULL_VERSION }}"
+
+          git config --global user.name "edgelessci"
+          git config --global user.email "edgelessci@users.noreply.github.com"
+          git add cli/assets/coordinator-policy-hash
+          git diff --staged --quiet || git commit -m "release: update coordinator policy hash"
       - name: Build CLI
         run: |
-          nix build .#cli
+          nix build .#cli-release
       - name: Create draft release
         uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v0.1.15
         with:
@@ -193,7 +201,7 @@ jobs:
           tag_name: ${{ inputs.version }}
           target_commitish: ${{ needs.process-inputs.outputs.WORKING_BRANCH }}
           files: |
-            result-cli/bin/nunki
+            result/bin/nunki
       - name: Reset temporary changes
         run: |
           git reset --hard ${{ needs.process-inputs.outputs.WORKING_BRANCH }}