fix: release workflow needs to start on main

[Molter73]

Description

The release workflow is currently broken because it checks out the release-* branch and attempts to run an action from there, this action does not exist in the release-* branch and should instead be using the version from main.

Checklist

• Patch has a change log entry OR does not need one.
• Investigated and inspected CI test results
• Updated documentation accordingly

Automated testing

• Added unit tests
• Added integration tests
• Added regression tests

If any of these don't apply, please comment below.

Testing Performed

• Run the release workflow in dry-run mode successfully: https://github.com/stackrox/fact/actions/runs/27958946486

Summary by CodeRabbit

• Chores
  • Updated the release workflow to improve the patch version determination process during releases.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yml

Review profile: CHILL

Plan: Enterprise

Run ID: 843401ef-91dd-46b7-aa28-36b82618b123

📥 Commits

Reviewing files that changed from the base of the PR and between 0e7b1cb and e8142c5.

📒 Files selected for processing (1)

• .github/workflows/release.yml

---

📝 Walkthrough

Walkthrough

In the release workflow, the ref: release-${{ inputs.version }} parameter is removed from the actions/checkout step. The "Determine patch version" shell script now performs an explicit git checkout release-"${VERSION}" before running git describe to compute the next patch number.

Changes

Release Workflow Checkout Refactor

Layer / File(s)	Summary
Shift branch checkout from actions/checkout to shell script .github/workflows/release.yml	Removes ref: release-${{ inputs.version }} from the actions/checkout step and adds git checkout release-"${VERSION}" at the start of the patch-version determination script.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Poem

🐇 A ref once lived in checkout's arms so tight,
Now hops into the shell script's cozy night.
git checkout leaps with VERSION in its paw,
The same branch found, with barely any flaw.
Small moves, big hops — the rabbit knows the way! 🌿

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately describes the core fix: the release workflow needs to operate from the main branch rather than checking out the release branch before executing actions.
Description check	✅ Passed	The description covers the problem, solution, and testing performed. The checklist is mostly complete with the relevant items checked, and testing confirmation is provided with a reference to the successful dry-run execution.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch mauro/fix/release-workflow

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 27.96%. Comparing base (0e7b1cb) to head (e8142c5).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #858   +/-   ##
=======================================
  Coverage   27.96%   27.96%           
=======================================
  Files          21       21           
  Lines        2596     2596           
  Branches     2596     2596           
=======================================
  Hits          726      726           
  Misses       1867     1867           
  Partials        3        3           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[JoukoVirtanen]

LGTM!