Files
mantrae/.github/workflows/release.yaml
2025-12-02 23:47:06 +01:00

84 lines
1.8 KiB
YAML

name: Release
on:
push:
tags:
- "v*"
permissions:
contents: write
packages: write
id-token: write
jobs:
release:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v6
- uses: pnpm/action-setup@v4
with:
version: latest
- name: Setup Node.js
uses: actions/setup-node@v6
with:
node-version: 24
cache: "pnpm"
cache-dependency-path: "web/pnpm-lock.yaml"
- name: Setup Go
uses: actions/setup-go@v6
with:
go-version-file: "go.mod"
- name: Install Task
uses: go-task/setup-task@v1
- name: Install UPX
run: |
sudo apt-get update
sudo apt-get install -y upx
- name: Install Cosign
uses: sigstore/cosign-installer@v4.0.0
- name: Install Syft
uses: anchore/sbom-action@v0
with:
upload-release-assets: false
- name: Install Ko
uses: ko-build/setup-ko@v0.9
- name: Build frontend & lint
run: |
task build:web
task lint
- name: Run GolangCI-Lint
uses: golangci/golangci-lint-action@v9
with:
args: --timeout=10m
- uses: docker/login-action@v3
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
- uses: goreleaser/goreleaser-action@v6
with:
version: latest
args: release --clean --skip=validate
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
COSIGN_YES: "true"
- name: ghcr.io cleanup
uses: dataaxiom/ghcr-cleanup-action@v1
with:
delete-untagged: true
token: ${{ secrets.GITHUB_TOKEN }}