diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3b77dcf4a6d..96a06c73cb1 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -7,6 +7,11 @@ on:
     branches:
       - main
 
+# Note the only differences between release and canary-release jobs are:
+# - only canary passes --overwrite flag
+# - the VERSION make variable passed to 'make dist checksum' is expected to
+#   be "canary" if the job is triggered by a push to "main" branch. If the
+#   job is triggered by a tag push, VERSION should be the tag ref.
 jobs:
   release:
     if: ${{ startsWith(github.ref, 'refs/tags/v') && github.repository_owner == 'helm' }}
@@ -65,4 +70,5 @@ jobs:
           container_name: ${{ secrets.AZURE_STORAGE_CONTAINER_NAME }}
           connection_string: ${{ secrets.AZURE_STORAGE_CONNECTION_STRING }}
           extra_args: '--pattern helm-*'
+          # WARNING: this will overwrite existing blobs in your blob storage
           overwrite: 'true'