ci: add commit_hash to force checkout

.github/workflows/cron.yml

@@ -5,21 +5,20 @@ on:
   schedule:
     # Daily at 9AM
     - cron: "0 9 * * *"
-
 
 jobs:
   update_ofac_list:
     runs-on: ubuntu-latest
     outputs:
       GIT_EXIT_CODE: ${{ steps.diff_flag.outputs.GIT_EXIT_CODE }}
+      NEW_COMMIT_HASH: ${{ steps.commit.outputs.commit_hash }}
     permissions:
       id-token: write
 
     steps:
       - name: Get GitHub Token from Akeyless
         id: get_github_token
-        uses:
-          docker://us-west1-docker.pkg.dev/devopsre/akeyless-public/akeyless-action:latest
+        uses: docker://us-west1-docker.pkg.dev/devopsre/akeyless-public/akeyless-action:latest
         with:
           api-url: https://api.gateway.akeyless.celo-networks-dev.org
           access-id: p-kf9vjzruht6l
@@ -46,10 +45,13 @@ jobs:
           echo "GIT_EXIT_CODE=$GIT_EXIT_CODE" >> $GITHUB_OUTPUT >> $GITHUB_OUTPUT
 
       - uses: stefanzweifel/git-auto-commit-action@v5
+        id: commit
         with:
           commit_message: "auto: Add new OFAC addresses"
 
   publish-npm-package:
     needs: update_ofac_list
     if: ${{ needs.update_ofac_list.outputs.GIT_EXIT_CODE == 1 }}
     uses: celo-org/compliance/.github/workflows/publish.yml@main
+    with:
+      commit_hash: ${{ needs.update_ofac_list.outputs.NEW_COMMIT_HASH }}

.github/workflows/publish.yml

@@ -2,7 +2,17 @@ name: Publish Package to npmjs
 
 on:
   workflow_call:
+    inputs:
+      commit_hash:
+        description: "Commit to checkout and to publish"
+        required: true
+        type: string
   workflow_dispatch:
+    inputs:
+      commit_hash:
+        description: "Commit to checkout and to publish"
+        required: true
+        type: string
 
 jobs:
   publish:
@@ -15,6 +25,8 @@ jobs:
 
     steps:
       - uses: actions/checkout@v4
+        with:
+          ref: ${{ inputs.commit_hash }}
 
       - name: Get NPM Token from Akeyless
         id: get_npmjs_token