diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8d7488d6c..8e51eae20 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -210,6 +210,7 @@ jobs:
               run --dev --no-gui ./dangerzone/install/linux/build-deb.py
 
       - name: Upload Dangerzone .deb
+        if: matrix.distro == 'debian' && matrix.version == 'bookworm'
         uses: actions/upload-artifact@v4
         with:
           name: dangerzone-${{ matrix.distro }}-${{ matrix.version }}.deb
@@ -250,7 +251,7 @@ jobs:
       - name: Download Dangerzone .deb
         uses: actions/download-artifact@v4
         with:
-          name: dangerzone-${{ matrix.distro }}-${{ matrix.version }}.deb
+          name: dangerzone-debian-bookworm.deb
           path: "deb_dist/"
 
       - name: Build end-user environment
diff --git a/install/linux/vendor-pymupdf.py b/install/linux/vendor-pymupdf.py
index c94707b01..3926415e9 100755
--- a/install/linux/vendor-pymupdf.py
+++ b/install/linux/vendor-pymupdf.py
@@ -1,6 +1,7 @@
 #!/usr/bin/env python3
 
 import argparse
+import os
 import subprocess
 import sys
 from pathlib import Path
@@ -41,7 +42,11 @@ def main():
         "--requirement",
         "/proc/self/fd/0",  # XXX: pip does not read requirements.txt from stdin
     ]
-    subprocess.check_output(cmd, input=container_requirements_txt)
+    subprocess.run(cmd, check=True, input=container_requirements_txt)
+
+    if not os.listdir(args.dest):
+        print(f">>> Failed to vendor PyMuPDF under '{args.dest}'", file=sys.stderr)
+
 
     print(f">>> Successfully vendored PyMuPDF under '{args.dest}'", file=sys.stderr)