release.yml

name: Deploy Go Binaries

on:
  push:
    tags:
      - 'v*.*.*'

permissions:
  contents: write
  id-token: write
  attestations: write

jobs:
  deploy:
    name: Deploy
    runs-on: ubuntu-latest
    steps:
      - name: Check out code into the Go module directory
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Setup Go
        uses: actions/setup-go@v5
        with:
          check-latest: true
          go-version-file: 'go.mod'

      - name: Build
        run: make dist

      - name: Upload artifacts
        uses: actions/upload-artifact@v4
        with:
          name: bin-${{ github.ref_name }}
          path: bin/*

      - name: Generate artifact attestation
        uses: actions/attest-build-provenance@v1
        with:
          subject-path: bin/*

      - name: Upload Releases
        uses: softprops/action-gh-release@v2
        if: startsWith(github.ref, 'refs/tags/')
        with:
          files: bin/*
          draft: true
          prerelease: false