release.yml

name: Release fsoc binaries

on:
  push:
    tags: ["v*"]

permissions:
  contents: read

jobs:
  release:
    name: Release
    runs-on: ubuntu-20.04

    permissions:
      id-token: write
      packages: write
      contents: write

    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
        with:
          egress-policy: audit

      - name: Checkout
        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
        with:
          fetch-depth: 0

      - name: Setup Go
        uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
        with:
          go-version: '1.21'
          check-latest: true

      - name: Install tools
        run: make install-tools

      - name: Set version environment variables
        run: make print-version-info >> $GITHUB_ENV

      - name: Run GoReleaser
        uses: goreleaser/goreleaser-action@7ec5c2b0c6cdda6e8bbb49444bc797dd33d74dd8 # v5.0.0
        with:
          version: 'v1.24.0'
          args: release --clean --timeout 5m
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          TAP_GITHUB_TOKEN: ${{ secrets.HOMEBREW_GITHUB_PUBLISHER_TOKEN }}
          GIT_BRANCH: ${{ github.ref_name }}
          BUILD_IS_DEV: 'false'