fix(ci): fix release workflow (#305)

* fix(ci): fix the release title

* fix(ci): check the branch before running the artifact build job

Author: behnazh

.github/workflows/release.yaml

@@ -60,7 +60,7 @@ jobs:
         git push --tags
   # When triggered by the version bump commit, build the package and publish the release artifacts.
   build:
-    if: startsWith(github.event.commits[0].message, 'bump:')
+    if: github.ref == 'refs/heads/main' && startsWith(github.event.commits[0].message, 'bump:')
     uses: ./.github/workflows/build.yaml
     permissions:
       contents: read
@@ -123,7 +123,7 @@ jobs:
       env:
         GH_TOKEN: ${{ secrets.REPO_ACCESS_TOKEN }}
       # Create the release including the artifacts and the SLSA L3 provenance.
-      run: gh release create `git describe --tags --abbrev=0` dist/* ${{ needs.provenance.outputs.attestation-name }} --notes-file RELEASE_NOTES.md
+      run: TAG=`git describe --tags --abbrev=0` && gh release create $TAG dist/* ${{ needs.provenance.outputs.attestation-name }} --title $TAG --notes-file RELEASE_NOTES.md
     # Uncomment the following steps to publish to a PyPI server.
     # At the moment PyPI does not provide a mechanism to publish
     # the provenance. So, users have to download the provenance from