release.yaml

name: Release
on:
  push:
    tags:
      - "v*"
  workflow_call:
permissions:
  id-token: write # For cosign
  packages: write # For GHCR
  contents: write # For goreleaser
jobs:
  release:
    name: Release
    runs-on: ubuntu-latest
    steps:
      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3

      - name: Set up Docker Buildx
        id: buildx
        uses: docker/setup-buildx-action@v3

      - name: Show available Docker Buildx platforms
        run: echo ${{ steps.buildx.outputs.platforms }}

      - name: Login to ghcr.io registry
        run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin

      - name: Checkout code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0 # Required by goreleaser-action for changelog to work

      - name: Setup Go
        uses: actions/setup-go@v5
        with:
          go-version-file: go.mod

      - name: GoReleaser
        uses: goreleaser/goreleaser-action@v6
        with:
          args: release -f=goreleaser.yml --clean --timeout 90m
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}