chore(deps): update go to 1.22 #42
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: PaperCrypt Release | |
| on: | |
| push: | |
| branches: | |
| - main | |
| env: | |
| DEBIAN_FRONTEND: noninteractive | |
| jobs: | |
| build: | |
| name: Build and Test | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - name: Set up Go | |
| uses: actions/setup-go@v5 | |
| with: | |
| go-version-file: go.mod | |
| check-latest: true | |
| cache-dependency-path: "**/*.sum" | |
| - name: Install dependencies | |
| run: | | |
| sudo apt-get install -y poppler-utils | |
| which pdftoppm | |
| - name: Install Task | |
| uses: arduino/setup-task@v1 | |
| with: | |
| version: 3.x | |
| repo-token: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Install GoReleaser | |
| uses: goreleaser/goreleaser-action@v5 | |
| with: | |
| install-only: true | |
| - name: Build | |
| run: task build | |
| - name: Test | |
| run: task test | |
| release: | |
| needs: build | |
| name: Release | |
| runs-on: ubuntu-22.04 | |
| permissions: | |
| contents: write | |
| packages: write | |
| id-token: write | |
| env: | |
| DOCKER_BUILDKIT: 1 | |
| steps: | |
| - name: Source checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - name: Fetch all tags | |
| run: git fetch --force --tags | |
| - name: Set up Go | |
| uses: actions/setup-go@v5 | |
| with: | |
| go-version-file: go.mod | |
| check-latest: true | |
| cache-dependency-path: "**/*.sum" | |
| - name: Save `go version` | |
| id: go-version | |
| run: echo "GOVERSION=$(go version)" >> $GITHUB_OUTPUT | |
| - name: Run `go mod tidy` and abort if changes were made | |
| run: go mod tidy -v && git diff --exit-code || (echo "go mod tidy made changes" && exit 1) | |
| - name: Set up Node | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: 20 | |
| - uses: sigstore/cosign-installer@v3 | |
| - name: Confirm cosign installation | |
| run: cosign version | |
| - name: Install dependencies | |
| run: | | |
| sudo apt-get install -y poppler-utils | |
| which pdftoppm | |
| - uses: crazy-max/ghaction-upx@v3 | |
| with: | |
| install-only: true | |
| - name: Install Task | |
| uses: arduino/setup-task@v1 | |
| with: | |
| version: 3.x | |
| repo-token: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Install GoReleaser | |
| uses: goreleaser/goreleaser-action@v5 | |
| with: | |
| install-only: true | |
| - uses: anchore/sbom-action/[email protected] | |
| - name: Set up QEMU | |
| uses: docker/setup-qemu-action@v3 | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@v3 | |
| with: | |
| driver: docker | |
| install: true | |
| - name: GitHub Container Registry Login | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Decode cosign key | |
| run: echo "${{ secrets.COSIGN_KEY_BASE64 }}" | base64 -d > cosign.key | |
| - name: Publish Release | |
| run: task release | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }} | |
| GORELEASER_TOKEN: ${{ secrets.GORELEASER_TOKEN }} | |
| GOVERSION: ${{ steps.go-version.outputs.GOVERSION }} | |
| S3_REGION: ${{ secrets.S3_REGION }} | |
| S3_ENDPOINT: ${{ secrets.S3_ENDPOINT }} | |
| S3_BUCKET: ${{ secrets.S3_BUCKET }} | |
| AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} |