diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index c04ddd3..68b4bb6 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -29,11 +29,8 @@ jobs:
       previous_tag: ${{ steps.check_pypi.outputs.previous_tag }}
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-python@v7
-        with:
-          python-version: "3.x"
       - uses: ultralytics/actions/setup-uv@main
-      - run: uv pip install --system --no-cache ultralytics-actions
+      - run: uv pip install --no-cache ultralytics-actions
       - id: check_pypi
         shell: python
         env:
@@ -77,12 +74,8 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-python@v7
-        with:
-          python-version: "3.x"
       - uses: ultralytics/actions/setup-uv@main
-      - run: uv pip install --system --no-cache build
-      - run: python -m build
+      - run: uv build
       - uses: actions/upload-artifact@v7
         with:
           name: dist
@@ -127,20 +120,15 @@ jobs:
       contents: write
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-python@v7
-        with:
-          python-version: "3.x"
       - uses: ultralytics/actions/setup-uv@main
-      - run: |
-          uv venv sbom-env
-          uv pip install -e .
-        env:
-          VIRTUAL_ENV: sbom-env
+      - run: uv pip install -e .
       - uses: anchore/sbom-action@v0
         with:
           format: spdx-json
           output-file: sbom.spdx.json
-          path: sbom-env
+          path: ${{ env.VIRTUAL_ENV }}
+        env:
+          SYFT_SOURCE_NAME: ${{ github.repository }} # name the SBOM after the repo, not the venv path
       - run: gh release upload ${{ needs.check.outputs.current_tag }} sbom.spdx.json --clobber
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}