diff --git a/.github/workflows/rotate.yml b/.github/workflows/rotate.yml
index 0bcafd0..1bfd7e0 100644
--- a/.github/workflows/rotate.yml
+++ b/.github/workflows/rotate.yml
@@ -21,8 +21,9 @@ jobs:
         with:
           toolchain: stable
       - run: |
+          set -xeu
           echo '${{ secrets.GOOGLE_APPLICATION_CREDENTIALS }}' > google_creds.json
-          export GOOGLE_APPLICATION_CREDENTIALS="$(cwd)/google_creds.json"
+          export GOOGLE_APPLICATION_CREDENTIALS="$(pwd)/google_creds.json"
           cargo run --manifest-path rust/certifier/Cargo.toml --bin certifier-rotate
         env:
           CERTIPASTA_ROTATE_CONFIG: ${{ vars.CERTIPASTA_ROTATE_CONFIG }}