release.yml

name: Release

on:
  push:
    tags:
      - 'v*'

permissions:
  contents: write

jobs:
  release:
    runs-on: ubuntu-latest
    steps:
      -
        name: Checkout
        uses: actions/checkout@v3
        with:
          fetch-depth: 0
      -
        name: Set up Go
        uses: actions/setup-go@v4
        with:
          go-version: '1.21'
          check-latest: true
      - run: go version
      - 
        name: Generate SBOM
        uses: anchore/sbom-action@v0
        with:
          artifact-name: bomber.cyclonedx.json
          path: .
          format: cyclonedx-json
      - 
        name: Release SBOM
        uses: anchore/sbom-action/publish-sbom@v0
        with:
          sbom-artifact-match: ".*\\.cyclonedx.json$"
      -
        name: GoReleaser Action
        uses: goreleaser/goreleaser-action@v4.2.0
        with:
          version: ${{ env.GITHUB_REF_NAME }}
          args: release --clean
        env:
          GITHUB_TOKEN: ${{ secrets.PUBLISHER_TOKEN }}