Address PR feedback

.github/workflows/e2e-test-trusted.yaml

@@ -16,5 +16,5 @@ jobs:
     uses: ./.github/workflows/e2e-tests.yaml
     with:
       environment: "trusted"
-      ref: ${{ github.sha }}
+      ref: ${{ github.event_name == 'push' && github.sha || github.event.pull_request.head.sha }}
     secrets: inherit

.github/workflows/e2e-test-untrusted.yaml

@@ -13,5 +13,5 @@ jobs:
     uses: ./.github/workflows/e2e-tests.yaml
     with:
       environment: "untrusted"
-      ref: ${{ github.sha }}
+      ref: ${{ github.event.pull_request.head.sha }}
     secrets: inherit

.github/workflows/e2e-tests.yaml

@@ -50,7 +50,7 @@ jobs:
         env:
           REGISTRY: ${{ steps.login-ecr.outputs.registry }}
           PLATFORM: "linux/amd64,linux/arm64"
-          TAG: ${{ env.TAG_UNTESTED }}
+          TAG: "${{ env.TAG_UNTESTED }}"
         run: |
           make -j `nproc` all-push-skip-if-present
   test:

.github/workflows/release.yaml

@@ -33,7 +33,7 @@ jobs:
       - name: Set up crane
         uses: imjasonh/[email protected]
 
-      - name: Configure AWS Credentials from CI Trusted acccount
+      - name: Configure AWS Credentials from CI Trusted account
         uses: aws-actions/configure-aws-credentials@v4
         with:
           role-to-assume: ${{ vars.CI_TRUSTED_IAM_ROLE }}
@@ -74,7 +74,7 @@ jobs:
           SOURCE_REGISTRY: ${{ steps.login-ecr-trusted.outputs.registry }}
         run: |
           crane copy ${SOURCE_REGISTRY}/${IMAGE_NAME}:${TAG_PASSED} ${ARS_REGISTRY}:${GIT_TAG}
-          if [ -n "$VAR" ]; then
+          if [ -n "${PUBLIC_REGISTRY}" ]; then
             crane copy ${SOURCE_REGISTRY}/${IMAGE_NAME}:${TAG_PASSED} ${PUBLIC_REGISTRY}:${GIT_TAG}
           fi