double checkout

.github/actions/check_measurements_reproducibility/action.yml

@@ -6,10 +6,19 @@ inputs:
     type: string
     description: The version of the measurements that are downloaded from the CDN.
     required: true
+  ref:
+    type: string
+    description: The git ref to check out. You probably want this to be the tag of the release you are testing.
+    required: true
 
 runs:
   using: "composite"
   steps:
+    - name: Checkout
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      with:
+        ref: ${{ inputs.ref }}
+
     - name: Set up bazel
       uses: ./.github/actions/setup_bazel_nix
       with:
@@ -32,7 +41,7 @@ runs:
 
     - name: Download measurements
       run: |
-        curl -O https://cdn.confidential.cloud/constellation/v2/ref/-/stream/stable/${{ github.event.inputs.version }}/image/measurements.json
+        curl -O https://cdn.confidential.cloud/constellation/v2/ref/-/stream/stable/${{ inputs.version }}/image/measurements.json
     
     - name: Cleanup release measurements and generate our own
       run: |

.github/workflows/check-measurements-reproducibility.yml

@@ -27,10 +27,9 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-        with:
-          ref: ${{ github.event.inputs.ref }}
-
+        
       - name: Check reproducibility
         uses: ./.github/actions/check_measurements_reproducibility
         with:
           version: ${{ github.event.inputs.version }}
+          ref: ${{ github.event.inputs.ref }}