Apply suggestions from code review

Signed-off-by: William Woodruff <william@trailofbits.com>

Tweaked Williams signed-off address to match the author.

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>

Author: woodruffw

.github/workflows/release.yml

@@ -140,7 +140,7 @@ jobs:
         # Confusingly, this action also supports updating releases, not
         # just creating them. This is what we want here, since we've manually
         # created the release that triggered the action.
-        uses: softprops/action-gh-release@a74c6b72af54cfa997e81df42d94703d6313a2d0 # v0.1.15
+        uses: softprops/action-gh-release@a74c6b72af54cfa997e81df42d94703d6313a2d0 # v2.0.6
         with:
           # smoketest-artifacts/ contains the signatures and certificates.
           files: |