diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 77a723d06..afdfd35a7 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -55,9 +55,14 @@ jobs:
       fail-fast: false
       matrix:
         platform: [amd64, arm64]
+        include:
+          - platform: amd64
+            runs-on: ubuntu-24.04
+          - platform: arm64
+            runs-on: ubuntu-24.04-arm
 
     timeout-minutes: 60
-    runs-on: ${{ matrix.platform == 'arm64' && 'ubuntu-24.04-arm' || 'ubuntu-24.04' }}
+    runs-on: ${{ matrix.runs-on }}
 
     outputs:
       tags: ${{ steps.meta.outputs.tags }}
diff --git a/.gitignore b/.gitignore
index 731dd2f9e..e6b243328 100644
--- a/.gitignore
+++ b/.gitignore
@@ -123,4 +123,7 @@ scripts/
 .auto-claude-status
 .claude_settings.json
 .security-key
-logs/security/
\ No newline at end of file
+logs/security/
+
+# Added by codex
+.codex