54 lines
1.2 KiB
YAML
54 lines
1.2 KiB
YAML
---
|
|
name: "release"
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- "*"
|
|
|
|
jobs:
|
|
release:
|
|
name: "release"
|
|
runs-on: "ubuntu-latest"
|
|
steps:
|
|
|
|
# checkout repo
|
|
- name: "checkout"
|
|
uses: "actions/checkout@v4"
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
# setup go
|
|
- name: "set up go"
|
|
uses: "actions/setup-go@v5"
|
|
with:
|
|
go-version: "stable"
|
|
|
|
# install syft
|
|
- name: "install syft"
|
|
uses: "anchore/sbom-action/download-syft@v0"
|
|
|
|
# generate sbom
|
|
- name: "generate sbom"
|
|
run: |
|
|
syft . -o spdx-json=sbom.spdx.json
|
|
syft . -o cyclonedx-json=sbom.cyclonedx.json
|
|
|
|
# run goreleaser
|
|
- name: "run goreleaser"
|
|
uses: "goreleaser/goreleaser-action@v6"
|
|
with:
|
|
version: "v2.8.2"
|
|
args: "release --clean --config ./.github/.goreleaser.yaml"
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GORELEASER_GITHUB_TOKEN }}
|
|
|
|
# upload sbom to release
|
|
- name: "upload sbom to release"
|
|
uses: "softprops/action-gh-release@v1"
|
|
with:
|
|
files: |
|
|
sbom.spdx.json
|
|
sbom.cyclonedx.json
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GORELEASER_GITHUB_TOKEN }}
|