diff --git a/.gitea/workflows/hello_world.yaml b/.gitea/workflows/hello_world.yaml
index 34090ce..3031a0e 100644
--- a/.gitea/workflows/hello_world.yaml
+++ b/.gitea/workflows/hello_world.yaml
@@ -13,23 +13,22 @@ jobs:
           ls ${{ github.workspace }}
       - run: true
       - name: Sign
-        uses: https://git.lerch.org/lobo/action-hsm-sign@014b12e7fb9312613239ca3f634888b84de6e761
+        id: sign
+        uses: https://git.lerch.org/lobo/action-hsm-sign@7ccd313368914969588e8782d6dd5042781a2db0
         with:
           pin: ${{ secrets.HSM_USER_PIN }}
           files: ???
           public_key: 'https://emil.lerch.org/serverpublic.pem'
       - run: |
-          echo "Source 0 should be ./bar: ${{ steps.Sign.outputs.SOURCE_0 }}"
+          echo "Source 0 should be ./bar: ${{ steps.sign.outputs.SOURCE_0 }}"
       - run: |
-          echo "Signature 0 should be ./bar.sig: ${{ steps.Sign.outputs.SIG_0 }}"
-      - run: echo "Index of bar (0) is ${{ steps.Sign.outputs.INDEX_0 }}"
-      - run: echo "URL of bar (0) is ${{ steps.Sign.outputs.URL_0 }}"
+          echo "Signature 0 should be ./bar.sig: ${{ steps.sign.outputs.SIG_0 }}"
+      - run: echo "URL of bar (0) is ${{ steps.sign.outputs.URL_0 }}"
       - run: |
-          echo "Source 1 should be ./foo: ${{ steps.Sign.outputs.SOURCE_1 }}"
+          echo "Source 1 should be ./foo: ${{ steps.sign.outputs.SOURCE_1 }}"
       - run: |
-          echo "Signature 1 should be ./foo.sig: ${{ steps.Sign.outputs.SIG_1 }}"
-      - run: echo "Index of foo (1) is ${{ steps.Sign.outputs.INDEX_1 }}"
-      - run: echo "URL of foo (1) is ${{ steps.Sign.outputs.URL_1 }}"
+          echo "Signature 1 should be ./foo.sig: ${{ steps.sign.outputs.SIG_1 }}"
+      - run: echo "URL of foo (1) is ${{ steps.sign.outputs.URL_1 }}"
       - name: list workflows
         if: always()
         run: ls ${{ github.workspace }}/.gitea/workflows/