diff --git a/.github/workflows/envoy.yml b/.github/workflows/envoy.yml
index 18509b3..022e75a 100644
--- a/.github/workflows/envoy.yml
+++ b/.github/workflows/envoy.yml
@@ -20,9 +20,10 @@ jobs:
     if: github.repository_owner == 'envoyproxy'
     steps:
     - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332  # v4.1.7
+
     - run: |
+        df -h
         bazel build --config=ci //:envoy_versions
         cat bazel-bin/envoy_versions.json | jq '.'
-
     - run: |
         bazel run --config=ci //tools/fetch -- -h
diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index 545d8ff..675794f 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -19,18 +19,21 @@ jobs:
     steps:
     - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332  # v4.1.7
 
+    - run: |
+        sudo mkdir -p /mnt/workspace/apt/import
+        sudo chown -R runner:runner /mnt/workspace
+        sudo mount -o bind /mnt/workspace/apt/import ./debs/import/
     - run: |
         mkdir ./debs/import
         gsutil -mq rsync -r gs://envoy-apt-cache/debs ./debs/import/
         ls -alh debs/import/
-
     - run: |
         . ./build-repository.sh
         import_public_key
         touch debs/excludes.txt
         echo ${{ github.token }} > debs/token.txt
         GNUPG_HOME="$(realpath ~/.gnupg)"
-        time bazel build "--sandbox_writable_path=${GNUPG_HOME}" --config=debs-ci //debs
+        time bazel build "--sandbox_writable_path=${GNUPG_HOME}" --verbose_failures --config=debs-ci //debs
       env:
         GITHUB_TOKEN: ${{ github.token }}