diff --git a/.github/workflows/trybot.yml b/.github/workflows/trybot.yml
index 2273e234438..18f3b540e51 100644
--- a/.github/workflows/trybot.yml
+++ b/.github/workflows/trybot.yml
@@ -191,5 +191,6 @@ jobs:
         run: |-
           go vet ./...
           go mod tidy
-      - name: Check that git is clean at the end of the job
+      - if: always()
+        name: Check that git is clean at the end of the job
         run: test -z "$(git status --porcelain)" || (git status; git diff; false)
diff --git a/internal/ci/base/github.cue b/internal/ci/base/github.cue
index 721b989eefa..1f23ca992b8 100644
--- a/internal/ci/base/github.cue
+++ b/internal/ci/base/github.cue
@@ -280,6 +280,7 @@ isReleaseTag: {
 
 checkGitClean: json.#step & {
 	name: "Check that git is clean at the end of the job"
+	if:   "always()"
 	run:  "test -z \"$(git status --porcelain)\" || (git status; git diff; false)"
 }