fix: set up test release workflow (#2)

Author: bdraco

.github/workflows/ci.yml

@@ -61,19 +61,15 @@ jobs:
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
 
-  release:
+  test_release:
     needs:
       - test
       - lint
       - commitlint
 
     runs-on: ubuntu-latest
-    environment: release
-    concurrency: release
-    permissions:
-      id-token: write
-      attestations: write
-      contents: write
+    environment: test_release
+    if: github.ref_name != 'main'
 
     steps:
       - uses: actions/checkout@v4
@@ -88,16 +84,39 @@ jobs:
       # Do a dry run of PSR
       - name: Test release
         uses: python-semantic-release/python-semantic-release@v9
-        if: github.ref_name != 'main'
         with:
           root_options: --noop
           github_token: noop
 
+  release:
+    needs:
+      - test
+      - lint
+      - commitlint
+
+    if: github.ref_name == 'main'
+    runs-on: ubuntu-latest
+    environment: release
+    concurrency: release
+    permissions:
+      id-token: write
+      attestations: write
+      contents: write
+
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          ref: ${{ github.sha }}
+
+      - name: Checkout commit for release
+        run: |
+          git checkout -B ${{ github.ref_name }} ${{ github.sha }}
+
       # On main branch: actual PSR + upload to PyPI & GitHub
       - name: Release
         uses: python-semantic-release/python-semantic-release@v9
         id: release
-        if: github.ref_name == 'main'
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}