diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2a2ea2e..beab996 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -57,7 +57,9 @@ jobs:
       - name: Generate SBOM and checksum
         shell: pwsh
         run: |
-          $exe = Get-ChildItem dist/KatoVPN-Router-Control-v*.exe | Select-Object -Single 1
+          $executables = @(Get-ChildItem dist/KatoVPN-Router-Control-v*.exe)
+          if ($executables.Count -ne 1) { throw "Expected one release executable, found $($executables.Count)." }
+          $exe = $executables[0]
           $sbom = Join-Path $exe.DirectoryName "$($exe.BaseName).cdx.json"
           cyclonedx-py requirements tools/nikki-router-setup/requirements.txt --output-reproducible --output-format JSON --output-file $sbom
           if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }