From d24c1889dc9ca73600b85972c42ffe400b828632 Mon Sep 17 00:00:00 2001
From: Joe Harvey <51208233+jharvey10@users.noreply.github.com>
Date: Wed, 19 Nov 2025 14:58:19 -0500
Subject: [PATCH] ci: move artifact download after checkout

---
 .github/workflows/publish-alloy-release.yml | 40 ++++++++++-----------
 1 file changed, 20 insertions(+), 20 deletions(-)

diff --git a/.github/workflows/publish-alloy-release.yml b/.github/workflows/publish-alloy-release.yml
index 2b32e5c0180..746aca8c8b4 100644
--- a/.github/workflows/publish-alloy-release.yml
+++ b/.github/workflows/publish-alloy-release.yml
@@ -223,26 +223,6 @@ jobs:
         go-version-file: go.mod
         cache: false
 
-    - name: Download dist
-      uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
-      with:
-        name: dist
-        path: dist
-
-    # Overwrite the original Windows Alloy executable with the signed version
-    - name: Download signed Windows executable
-      uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
-      with:
-        name: windows-executables-signed
-        path: .
-
-    # Overwrite the original Windows Alloy installer with the signed version
-    - name: Download signed Windows installer
-      uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
-      with:
-        name: windows-installer-signed
-        path: dist
-
     # A GitHub App is used to create the release instead of github-actions so that submit-winget-manifest is triggered when the release is published
     - name: Get GitHub app secrets
       id: get-secrets
@@ -269,6 +249,26 @@ jobs:
         token: ${{ steps.app-token.outputs.token }}
         persist-credentials: false
 
+    - name: Download dist
+      uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+      with:
+        name: dist
+        path: dist
+
+    # Overwrite the original Windows Alloy executable with the signed version
+    - name: Download signed Windows executable
+      uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+      with:
+        name: windows-executables-signed
+        path: .
+
+    # Overwrite the original Windows Alloy installer with the signed version
+    - name: Download signed Windows installer
+      uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+      with:
+        name: windows-installer-signed
+        path: dist
+
     - name: Publish
       run: |
         VERSION="${GITHUB_REF_NAME}" RELEASE_DOC_TAG=$(echo "${GITHUB_REF_NAME}" | awk -F '.' '{print $1"."$2}') ./tools/release