diff --git a/.gitea/workflows/release.yml b/.gitea/workflows/release.yml
index bcf9b05..9a672be 100644
--- a/.gitea/workflows/release.yml
+++ b/.gitea/workflows/release.yml
@@ -56,9 +56,20 @@ jobs:
 
       - name: Unlock keychain and run fastlane release
         run: |
-          security unlock-keychain -p "${{ secrets.CI_KEYCHAIN_PASSWORD }}" ~/Library/Keychains/ci-signing.keychain-db
-          security list-keychains -d user -s ~/Library/Keychains/ci-signing.keychain-db ~/Library/Keychains/login.keychain-db
-          security default-keychain -d user -s ~/Library/Keychains/ci-signing.keychain-db
+          echo "whoami: $(whoami)"
+          echo "HOME: $HOME"
+          echo "expanded keychain path: $HOME/Library/Keychains/ci-signing.keychain-db"
+          ls -la "$HOME/Library/Keychains/" || echo "cannot list Keychains dir"
+          security unlock-keychain -p "${{ secrets.CI_KEYCHAIN_PASSWORD }}" "$HOME/Library/Keychains/ci-signing.keychain-db"
+          echo "--- keychain info ---"
+          security show-keychain-info "$HOME/Library/Keychains/ci-signing.keychain-db" || true
+          security list-keychains -d user -s "$HOME/Library/Keychains/ci-signing.keychain-db" "$HOME/Library/Keychains/login.keychain-db"
+          security default-keychain -d user -s "$HOME/Library/Keychains/ci-signing.keychain-db"
+          echo "--- current search list ---"
+          security list-keychains
+          echo "--- dump-keychain identity count ---"
+          security dump-keychain "$HOME/Library/Keychains/ci-signing.keychain-db" | grep -c "class.*0x80001000" || true
+          echo "--- find-identity ---"
           security find-identity -v -p codesigning
           cd Darwin
           fastlane release