Skip to content

ci: include cpu arch versions #2

ci: include cpu arch versions

ci: include cpu arch versions #2

Workflow file for this run

name: Release with Goreleaser
permissions: write-all
on:
workflow_dispatch: # enable manual triggering of workflow
push:
tags:
- v*
jobs:
build:
runs-on: ubuntu-latest
steps:
- name: Set up Go 1.21
uses: actions/setup-go@v5
with:
go-version: 1.21
- name: Registry login
uses: docker/login-action@v3
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Checkout repo
uses: actions/checkout@v4
with:
fetch-tags: 1
fetch-depth: 0
- name: Release with goreleaser
uses: goreleaser/goreleaser-action@v6
env:
GITHUB_TOKEN: ${{ github.token }}
with:
version: '~> v2'
args: release --clean
id: goreleaser
- name: Process goreleaser output
id: process_goreleaser_output
run: |
echo "const fs = require('fs');" > process.js
echo 'const artifacts = ${{ steps.goreleaser.outputs.artifacts }}' >> process.js
echo "const firstNonNullDigest = artifacts.find(artifact => artifact.extra && artifact.extra.Digest != null)?.extra.Digest;" >> process.js
echo "console.log(firstNonNullDigest);" >> process.js
echo "fs.writeFileSync('digest.txt', firstNonNullDigest);" >> process.js
node process.js
echo "digest=$(cat digest.txt)" >> $GITHUB_OUTPUT
- name: Attest ochami binary linux_amd64
uses: actions/attest-build-provenance@v1
with:
subject-path: '${{ github.workspace }}/dist/ochami_linux_amd64_v1/ochami'
- name: Attest ochami binary linux_arm64
uses: actions/attest-build-provenance@v1
with:
subject-path: '${{ github.workspace }}/dist/ochami_linux_arm64_v8.0/ochami'
- name: Attest ochami binary darwin_amd64
uses: actions/attest-build-provenance@v1
with:
subject-path: '${{ github.workspace }}/dist/ochami_darwin_amd64_v1/ochami'
- name: Attest ochami binary darwin_arm64
uses: actions/attest-build-provenance@v1
with:
subject-path: '${{ github.workspace }}/dist/ochami_darwin_arm64_v8.0/ochami'
- name: Attest ochami binary windows_amd64
uses: actions/attest-build-provenance@v1
with:
subject-path: '${{ github.workspace }}/dist/ochami_windows_amd64_v1/ochami.exe'
- name: Attest ochami binary windows_arm64
uses: actions/attest-build-provenance@v1
with:
subject-path: '${{ github.workspace }}/dist/ochami_windows_arm64_v8.0/ochami.exe'
- name: Attest ochami docker container
uses: actions/attest-build-provenance@v1
with:
subject-name: ghcr.io/openchami/ochami
subject-digest: ${{ steps.process_goreleaser_output.outputs.digest }}
push-to-registry: true