diff --git a/.github/workflows/ci-build.yaml b/.github/workflows/ci-build.yaml
index 2700fc2ae23..8919a318cae 100644
--- a/.github/workflows/ci-build.yaml
+++ b/.github/workflows/ci-build.yaml
@@ -92,7 +92,7 @@ jobs:
           set -x
           for line in `cat packages.log`; do
             # convert the melange output (e.g. "x86_64|grype|grype|0.63.0-r1" ) to an actual apk path
-            apk_path=$(echo "${line}" | awk '{ split($1, pkg, "|"); printf("packages/%s/%s-%s.apk\n", pkg[1], pkg[2], pkg[4]) }')
+            apk_path=$(echo "${line}" | awk '{ split($1, pkg, "|"); printf("packages/%s/%s-%s.apk\n", pkg[1], pkg[3], pkg[4]) }')
             ./scripts/grype-scan-apk.sh "${apk_path}"
           done