once/.github/workflows/release.yml at main · basecamp/once · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
name: Release

permissions: {}

on:
  push:
    tags: [ "v*" ]

jobs:
  ci:
    name: CI
    uses: ./.github/workflows/ci.yml
    permissions:
      contents: read

  release:
    needs: [ci]
    permissions:
      contents: write
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
      with:
        persist-credentials: false

    - name: Set up Go
      uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5.6.0 # zizmor: ignore[cache-poisoning] -- cache is branch-isolated; fork PRs cannot write to this cache
      with:
        go-version-file: go.mod

    - name: Build release artifacts
      run: make dist

    - name: Create release
      env:
        GH_TOKEN: ${{ github.token }}
      run: >
        gh release create "${GITHUB_REF_NAME}"
        dist/*
        --title "Release ${GITHUB_REF_NAME}"