A workflow succeeds in one branch but fails in another

A generated certificate, JSON blob, or changelog is written to GITHUB_ENV and only some branches or shells later consume a broken value.