diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index 23fe4e5e7d1..a8944643da5 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -21,6 +21,8 @@ on:
       - "release-notes/**"
     branches:
       - master
+      # hardcoded LTS branch, change when new LTS released!
+      - '3.12'
   pull_request:
     paths-ignore:
       - "doc/**"
@@ -481,7 +483,9 @@ jobs:
     name: Create a GitHub LTS prerelease with the binary artifacts
     runs-on: ubuntu-latest
     # The LTS branch is hardcoded for now, update it on a new LTS!
-    if: github.ref == 'refs/heads/3.12'
+    # if: github.ref == 'refs/heads/3.12'
+    permissions:
+      contents: write
 
     # IMPORTANT! Any job added to the workflow should be added here too
     needs: [validate, validate-old-ghcs, build-alpine, dogfooding]
@@ -494,12 +498,15 @@ jobs:
 
     - run: |
         # bash-ism, but we forced bash above
-        mv cabal-{,lts-}head-Windows-x86_64.tar.gz
-        mv cabal-{,lts-}head-Linux-x86_64.tar.gz
-        mv cabal-{,lts-}head-Linux-static-x86_64.tar.gz
-        mv cabal-{,lts-}head-macOS-aarch64.tar.gz
+        cd binaries
+        for f in cabal-*; do
+          mv "$f" "cabal-lts-${f##cabal-}"
+        done
+
+    - run: echo ${{ github.ref }}
 
     - name: Create GitHub prerelease
+      if: github.ref == 'refs/heads/3.12'
       uses: softprops/action-gh-release@v2
       with:
         tag_name: cabal-lts-head