fix(ci): scan the pinned upstream images before the release, not at it

fix(ci): scan the pinned upstream images before the release, not at it #6667