diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c007240d..de6422a4 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -39,6 +39,12 @@ jobs:
           exclude_tags_regex: '[0-6]\.\d\.\d'
           issue_line_labels: mysql_hardening,os_hardening,ssh_hardening,nginx_hardening
 
+      # do a second checkout to prevent race situation
+      # changelog gets updated but action works on old commit id
+      - uses: actions/checkout@v3
+        with:
+          ref: master
+
       - name: push changelog
         uses: github-actions-x/commit@v2.9
         with:
@@ -50,12 +56,6 @@ jobs:
           name: dev-sec CI
           email: hello@dev-sec.io
 
-      # do a second checkout to prevent race situation
-      # changelog gets updated but action works on old commit id
-      - uses: actions/checkout@v3
-        with:
-          ref: master
-
       - name: Generate changelog for the release
         run: |
           sed '/## \[${{ steps.previoustag.outputs.tag }}\]/Q' CHANGELOG.md > CHANGELOGRELEASE.md