fix release job (#536)

Author: cpanato

.github/workflows/release.yaml

@@ -47,7 +47,16 @@ jobs:
         with:
           egress-policy: audit
 
+      - uses: octo-sts/action@6177b4481c00308b3839969c3eca88c96a91775f # v1.0.0
+        id: octo-sts
+        with:
+          scope: ${{ github.repository }}
+          identity: release
+
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          fetch-depth: 0 # fetch all history for all tags and branches
+          token: ${{ steps.octo-sts.outputs.token }}
 
       - name: Check if any changes since last tag
         id: check
@@ -61,12 +70,6 @@ jobs:
             echo "bump=no" >> "$GITHUB_OUTPUT"
           fi
 
-      - uses: octo-sts/action@6177b4481c00308b3839969c3eca88c96a91775f # v1.0.0
-        id: octo-sts
-        with:
-          scope: ${{ github.repository }}
-          identity: release
-
       - name: Bump and push Git tag
         uses: chainguard-dev/actions/git-tag@f309c81b34d59c103f5b86a2e55a2a647dc8b40a # v1.0.1
         if: steps.check.outputs.bump == 'yes'