release.yaml

---
name: Release

permissions:
  actions: none
  checks: none
  contents: write
  deployments: none
  issues: none
  packages: none
  pages: none
  pull-requests: none
  repository-projects: none
  security-events: none

on:
  push:
    tags:
      - "*"

defaults:
  run:
    shell: bash

jobs:
  tag:
    name: Release
    runs-on: ubuntu-latest
    env:
      gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}

    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - run: git fetch --force --tags

      - name: Setup Golang
        uses: actions/setup-go@v5
        with:
          go-version: "^1.22"
          cache: true

      - name: GPG
        id: import_gpg
        if: ${{ env.gpg_private_key != '' }}
        uses: crazy-max/ghaction-import-gpg@v6
        with:
          gpg_private_key: ${{ env.gpg_private_key }}
          passphrase: ${{ secrets.GPG_PASSPHRASE }}

      - uses: goreleaser/goreleaser-action@v6
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          GPG_FINGERPRINT: ${{ steps.import_gpg.outputs.fingerprint }}
        with:
          distribution: goreleaser
          version: "~> v2"
          args: release --clean