fix: show version in version command

.github/workflows/release.yml

@@ -32,6 +32,7 @@ jobs:
           echo "::set-output name=version::$(git describe --tags --always --dirty | cut -c2-)"
 
   builder:
+    needs: [args]
     permissions:
       actions: read # For the detection of GitHub Actions environment.
       id-token: write # For signing.

RELEASE.md

@@ -39,6 +39,10 @@ Check the following:
 1. Ensure that the release is successful and provenance can be verified properly. 
 2. Either manually trigger or wait for a nightly scheduled run of all [example-package e2e tests](https://github.com/slsa-framework/example-package/tree/main/.github/workflows) and ensure that all tests are passing.
 3. Ensure that the latest release can be installed via a `go install`.
+4. Verify that the version reported by the `version` command is correct:
+```shell
+$ ./slsa-verifier version 2>&1 | grep GitVersion 
+```
 
 If both of these steps succeed, then move on to the [Final Release](#final-release).
 

actions/installer/dist/index.js

@@ -119,7 +119,8 @@ function cleanup() {
 }
 function run() {
     return __awaiter(this, void 0, void 0, function* () {
-        // Get requested verifier version and validate
+        // Get requested verifier version and validate.
+        // See https://docs.github.com/en/actions/learn-github-actions/contexts#github-context.
         const actionRef = process.env.GITHUB_ACTION_REF || "";
         let version;
         try {

actions/installer/src/index.ts

@@ -87,7 +87,8 @@ async function cleanup(): Promise<void> {
 }
 
 async function run(): Promise<void> {
-  // Get requested verifier version and validate
+  // Get requested verifier version and validate.
+  // See https://docs.github.com/en/actions/learn-github-actions/contexts#github-context.
   const actionRef = process.env.GITHUB_ACTION_REF || "";
   let version: string;
   try {