diff --git a/.gitea/workflows/demo.yaml b/.gitea/workflows/demo.yaml
index c7c2786..fdde2fb 100644
--- a/.gitea/workflows/demo.yaml
+++ b/.gitea/workflows/demo.yaml
@@ -38,7 +38,10 @@ jobs:
         run: |
           mkdir -p test-results
           echo "diagnostic content $(date -u)" > test-results/diagnostic.txt
-
+      - name: Diagnostic -- print artifact/runtime URLs the runner injected
+        if: always()
+        run: |
+          env | grep -i "^ACTIONS_\|^GITHUB_" | sed -E 's/(TOKEN|SECRET)=.*/\1=[redacted]/i'
       - name: Run the intentionally-failing verification test
         run: |
           .venv/bin/python -m pytest tests/test_zz_temp_verify_artifact_upload.py \