diff --git a/.github/workflows/shardok_profile.yml b/.github/workflows/shardok_profile.yml
index 63f76fad51..32d199b335 100644
--- a/.github/workflows/shardok_profile.yml
+++ b/.github/workflows/shardok_profile.yml
@@ -37,11 +37,8 @@ jobs:
     env:
       PROFILE_DURATION: ${{ inputs.duration_seconds }}
       SAMPLE_FREQUENCY: ${{ inputs.sample_frequency }}
-      SSH_KEY_PATH: ${{ runner.temp }}/hetzner-profile-key
-      KNOWN_HOSTS_PATH: ${{ runner.temp }}/hetzner-profile-known-hosts
       REMOTE_PROFILE_DIR: /tmp/eagle0-shardok-profile-${{ github.run_id }}-${{ github.run_attempt }}
       REMOTE_PROFILE_ARCHIVE: /tmp/eagle0-shardok-profile-${{ github.run_id }}-${{ github.run_attempt }}.tar.gz
-      LOCAL_PROFILE_ARCHIVE: ${{ runner.temp }}/eagle0-shardok-profile-${{ github.run_id }}-${{ github.run_attempt }}.tar.gz
     steps:
       - name: Checkout repository
         uses: actions/checkout@v7
@@ -55,6 +52,8 @@ jobs:
           HETZNER_IP: ${{ secrets.HETZNER_IP }}
         run: |
           set -euo pipefail
+          SSH_KEY_PATH="$RUNNER_TEMP/hetzner-profile-key"
+          KNOWN_HOSTS_PATH="$RUNNER_TEMP/hetzner-profile-known-hosts"
           printf '%s\n' "$HETZNER_SSH_KEY" > "$SSH_KEY_PATH"
           chmod 600 "$SSH_KEY_PATH"
           ssh-keyscan -H "$HETZNER_IP" > "$KNOWN_HOSTS_PATH" 2>/dev/null
@@ -64,6 +63,8 @@ jobs:
           HETZNER_IP: ${{ secrets.HETZNER_IP }}
         run: |
           set -euo pipefail
+          SSH_KEY_PATH="$RUNNER_TEMP/hetzner-profile-key"
+          KNOWN_HOSTS_PATH="$RUNNER_TEMP/hetzner-profile-known-hosts"
           ssh \
             -i "$SSH_KEY_PATH" \
             -o StrictHostKeyChecking=yes \
@@ -81,6 +82,9 @@ jobs:
           HETZNER_IP: ${{ secrets.HETZNER_IP }}
         run: |
           set -euo pipefail
+          SSH_KEY_PATH="$RUNNER_TEMP/hetzner-profile-key"
+          KNOWN_HOSTS_PATH="$RUNNER_TEMP/hetzner-profile-known-hosts"
+          LOCAL_PROFILE_ARCHIVE="$RUNNER_TEMP/eagle0-shardok-profile-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}.tar.gz"
           scp \
             -i "$SSH_KEY_PATH" \
             -o StrictHostKeyChecking=yes \
@@ -93,7 +97,7 @@ jobs:
         uses: actions/upload-artifact@v7
         with:
           name: shardok-profile-${{ github.run_id }}-${{ github.run_attempt }}
-          path: ${{ env.LOCAL_PROFILE_ARCHIVE }}
+          path: ${{ runner.temp }}/eagle0-shardok-profile-${{ github.run_id }}-${{ github.run_attempt }}.tar.gz
           if-no-files-found: warn
           retention-days: 14
           compression-level: 0
@@ -103,6 +107,9 @@ jobs:
         env:
           HETZNER_IP: ${{ secrets.HETZNER_IP }}
         run: |
+          SSH_KEY_PATH="$RUNNER_TEMP/hetzner-profile-key"
+          KNOWN_HOSTS_PATH="$RUNNER_TEMP/hetzner-profile-known-hosts"
+          LOCAL_PROFILE_ARCHIVE="$RUNNER_TEMP/eagle0-shardok-profile-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}.tar.gz"
           if [ -f "$SSH_KEY_PATH" ] && [ -f "$KNOWN_HOSTS_PATH" ]; then
             ssh \
               -i "$SSH_KEY_PATH" \