Split inputs into version and ref

.github/workflows/check-measurements-reproducibility.yml

@@ -2,15 +2,23 @@ name: Check measurements reproducibility
 on:
   workflow_dispatch:
     inputs:
-      releasetag:
+      version:
         type: string
-        description: The release to checkout and download.
+        description: The version of the measurements that are downloaded from the CDN.
+        required: true
+      ref:
+        type: string
+        description: The git ref to check out.
         required: true
   workflow_call:
     inputs:
-      releasetag:
+      version:
         type: string
-        description: The release to checkout and download.
+        description: The version of the measurements that are downloaded from the CDN.
+        required: true
+      ref:
+        type: string
+        description: The git ref to check out.
         required: true
 
 jobs:
@@ -20,7 +28,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
-          ref: ${{ github.event.inputs.releasetag }}
+          ref: ${{ github.event.inputs.ref }}
       - name: Set up bazel
         uses: ./.github/actions/setup_bazel_nix
         with:
@@ -43,7 +51,7 @@ jobs:
 
       - name: Download measurements
         run: |
-          curl -O https://cdn.confidential.cloud/constellation/v2/ref/-/stream/stable/${{ github.event.inputs.releasetag }}/image/measurements.json
+          curl -O https://cdn.confidential.cloud/constellation/v2/ref/-/stream/stable/${{ github.event.inputs.version }}/image/measurements.json
       
       - name: Cleanup release measurements and generate our own
         run: |

.github/workflows/release.yml

@@ -241,10 +241,11 @@ jobs:
 
   check-measurements-reproducibility:
     name: Check measurements reproducibility
-    needs: [os-image]
+    needs: [verify-inputs, os-image]
     uses: ./.github/workflows/check-measurements-reproducibility.yml
     with:
-      releasetag: ${{ inputs.version }}
+      version: ${{ inputs.version }}
+      ref: ${{ needs.verify-inputs.outputs.WORKING_BRANCH }}
 
   update-hardcoded-measurements:
     name: Update hardcoded measurements (in the CLI)