add syft for sbom and image templates #16

	name: goreleaser

	on:
	push:
	tags:
	- "*"

	permissions:
	contents: write
	packages: write
	id-token: write

	jobs:
	goreleaser:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0

	- run: git fetch --force --tags

	- uses: actions/setup-go@v4
	with:
	go-version: stable

	- name: Log into GHCR registry
	uses: docker/login-action@f4ef78c080cd8ba55a85445d5b36e214a81df20a
	with:
	registry: ghcr.io
	username: ${{ github.actor }}
	password: ${{ secrets.GITHUB_TOKEN }}

	- name: Install Cosign
	uses: sigstore/cosign-installer@v3.1.2

	- name: Install Syft for SBOM Generation
	shell: bash
	run: curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh \| sh -s -- -b /usr/local/bin

	- name: Release with Goreleaser
	uses: goreleaser/goreleaser-action@v4
	with:
	distribution: goreleaser
	version: latest
	args: release --clean
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Provide feedback