From 9e5c25cc7a56f3a30d6b86e08003fb41067465c5 Mon Sep 17 00:00:00 2001
From: piaro <7055807+piaro@users.noreply.github.com>
Date: Fri, 11 Sep 2026 16:32:35 +0900
Subject: [PATCH] Scope the release ID to candidate generation

---
 .github/workflows/release.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 71a9e45..3fbbe8e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -35,7 +35,6 @@ jobs:
       ADF_RELEASE_SOURCE_ID: ${{ inputs.source_id }}
       ADF_RELEASE_SIGNER_KEY_ID: ${{ inputs.signer_key_id }}
       ADF_RELEASE_OUTPUT_DIR: ${{ github.workspace }}/dist/framework
-      ADF_RELEASE_ID: ${{ inputs.release_id }}
 
     steps:
       - name: Check out reviewed source
@@ -50,6 +49,8 @@ jobs:
         run: sh scripts/tests/test-rust.sh
 
       - name: Build and verify signed Release candidate
+        env:
+          ADF_RELEASE_ID: ${{ inputs.release_id }}
         run: sh scripts/release-ci.sh
 
       - name: Attest distribution trust provenance