Skip to content

Merge pull request #80 from Bonial-International-GmbH/dependabot/gith… #48

Merge pull request #80 from Bonial-International-GmbH/dependabot/gith…

Merge pull request #80 from Bonial-International-GmbH/dependabot/gith… #48

Workflow file for this run

---
name: release
on:
workflow_dispatch:
push:
branches:
- main
permissions: read-all
jobs:
release-please:
runs-on: ubuntu-latest
if: ${{ github.repository_owner == 'Bonial-International-GmbH' }}
permissions:
contents: write
pull-requests: write
outputs:
release_created: ${{ steps.release-please.outputs.release_created }}
tag_name: ${{ steps.release-please.outputs.tag_name }}
steps:
- name: Run release-please
id: release-please
uses: googleapis/release-please-action@v4
publish-image:
needs: release-please
runs-on: ubuntu-latest
if: ${{ github.repository_owner == 'Bonial-International-GmbH' }}
permissions:
packages: write
contents: read
steps:
- name: Checkout
uses: actions/checkout@v5
- name: Set up QEMU
uses: docker/setup-qemu-action@v3
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
- name: Login to ghcr.io
uses: docker/login-action@v3
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Generate container metadata
id: meta
uses: docker/metadata-action@v5
with:
images: |
ghcr.io/bonial-international-gmbh/sops-check
tags: |
type=sha
type=raw,value=${{ needs.release-please.outputs.tag_name }},enable=${{ needs.release-please.outputs.release_created == 'true' }}
type=raw,value=latest
- name: Build and push
uses: docker/build-push-action@v6
with:
context: .
platforms: linux/amd64,linux/arm64
push: true
tags: ${{ steps.meta.outputs.tags }}
labels: ${{ steps.meta.outputs.labels }}
publish-binaries:
needs: release-please
if: ${{ github.repository_owner == 'Bonial-International-GmbH' && needs.release-please.outputs.release_created }}
runs-on: ubuntu-latest
permissions:
contents: write
steps:
- name: Checkout
uses: actions/checkout@v5
with:
ref: ${{ needs.release-please.outputs.tag_name }}
- name: Unshallow
run: git fetch --prune --unshallow
- name: Setup
uses: actions/setup-go@v6
with:
go-version: 1.22
- name: Run GoReleaser
uses: goreleaser/goreleaser-action@v6
with:
version: latest
args: release --clean
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}