In my case, I hadn’t set packagesPath, and so find errored, but the action (and ultimately the workflow) still appeared to succeed. It was only after not being able to find the candidate on Hackage that I came back to review the workflow and realize what happened.
Probably, adding some strict flags (e.g., set -euo pipefail) would cause any failure to propagate correctly.