Update ci.yaml

.github/workflows/ci.yaml

@@ -1,40 +1,37 @@
 name: CI
-
 on:
   push:
-    branches: [ main ]
+    branches:
+      - main
   pull_request:
-    branches: [ main ]
-
+    branches:
+      - main
+permissions:
+  contents: write
+  id-token: write
 jobs:
   lint:
     name: Lint
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v2
-      - uses: golangci/golangci-lint-action@v2
-
-  security-check:
-    name: Security Check
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v2
-      - uses: securego/gosec@master
-        with:
-          args: ./...
+    uses: gofor-little/github-actions/.github/workflows/golang-lint.yaml@main
   test:
     name: Test
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-go@v2
-        with:
-          go-version: ^1.17
-      - run: |
-          go get -v -t -d ./...
-      - run: |
-          go test -v ./...
-        env:
-          AWS_REGION: ${{ secrets.AWS_REGION }}
-          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
-          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+    uses: gofor-little/github-actions/.github/workflows/golang-test.yaml@main
+    with:
+      aws-role: arn:aws:iam::320045747480:role/github-actions
+  bump-tag:
+    if: github.ref == 'refs/heads/main' && github.event_name == 'push'
+    needs:
+      - lint
+      - test
+    name: Bump Tag
+    uses: gofor-little/github-actions/.github/workflows/bump-tag.yaml@main
+  release:
+    if: github.ref == 'refs/heads/main' && github.event_name == 'push'
+    needs:
+      - bump-tag
+    name: Release
+    uses: gofor-little/github-actions/.github/workflows/github-release.yaml@main
+    with:
+      tag: ${{ needs.bump-tag.outputs.bumped-tag }}
+    secrets:
+      github-token: ${{ secrets.GITHUB_TOKEN }}