Merge pull request #2 from parca-dev/go-mod-fix #3
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | |
| on: | |
| push: | |
| tags: | |
| - v* | |
| permissions: | |
| contents: write | |
| env: | |
| # renovate: datasource=go depName=github.com/goreleaser/goreleaser | |
| GORELEASER_VERSION: v1.10.2 | |
| jobs: | |
| binaries: | |
| name: Goreleaser release | |
| runs-on: ubuntu-latest | |
| if: startsWith(github.ref, 'refs/tags/') | |
| container: | |
| image: docker.io/goreleaser/goreleaser-cross:v1.18.3 | |
| options: --privileged | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| steps: | |
| - name: Check out the code | |
| uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 | |
| with: | |
| fetch-depth: 0 | |
| - name: Set up Go | |
| uses: actions/setup-go@84cbf8094393cdc5fe1fe1671ff2647332956b1a # tag=v3.2.1 | |
| with: | |
| go-version-file: 'go.mod' | |
| cache: true | |
| - name: Fetch all tags | |
| run: git fetch --force --tags | |
| - name: Run Goreleaser | |
| run: goreleaser release --rm-dist --debug | |
| - name: Archive generated artifacts | |
| uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # tag=v3.1.0 | |
| with: | |
| name: parca-push-dist-release | |
| if-no-files-found: error | |
| path: | | |
| goreleaser/dist | |
| !goreleaser/dist/*.txt | |
| docs: | |
| name: Publish Docs | |
| runs-on: ubuntu-latest | |
| needs: binaries | |
| steps: | |
| - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # tag=v3.1.0 | |
| - name: Publish Vercel | |
| run: | | |
| curl -X POST "https://api.vercel.com/v1/integrations/deploy/${{ secrets.VERCEL_WEBHOOK }}" | |
| container: | |
| name: Build and release container images | |
| runs-on: ubuntu-latest | |
| needs: binaries | |
| container: | |
| # https://github.com/containers/podman/tree/main/contrib/podmanimage | |
| # Specifying SHA repeatedly fails: | |
| # @sha256:421ac576cebff98e90c531e7b9ce4482370ecc7cee59abc2341714031bfb5f43 | |
| image: quay.io/containers/podman:v4.1.1 | |
| options: >- | |
| --device /dev/fuse:rw | |
| --privileged | |
| --security-opt label=disable | |
| --security-opt seccomp=unconfined | |
| permissions: | |
| id-token: write | |
| packages: write | |
| contents: read | |
| steps: | |
| - name: Install dependencies | |
| run: dnf install --assumeyes --repo fedora git make jq | |
| - name: Check out code into the Go module directory | |
| uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 | |
| - name: Set up Go | |
| uses: actions/setup-go@84cbf8094393cdc5fe1fe1671ff2647332956b1a # tag=v3.2.1 | |
| with: | |
| go-version-file: 'go.mod' | |
| check-latest: true | |
| - name: Get branch name | |
| shell: bash | |
| run: echo "GITHUB_BRANCH_NAME=$(echo ${GITHUB_REF#refs/heads/} | tr / -)" >> $GITHUB_ENV | |
| - uses: actions/download-artifact@v3 | |
| with: | |
| name: parca-push-dist-release | |
| path: goreleaser/dist | |
| - name: Build container | |
| run: make container | |
| - name: Check images are created | |
| run: podman images | grep 'ghcr.io/parca-dev/parca-push' | |
| - name: Login to registry | |
| if: ${{ github.event_name != 'pull_request' }} | |
| run: | | |
| echo "${{ secrets.PERSONAL_ACCESS_TOKEN }}" | podman login -u parca-dev --password-stdin ghcr.io | |
| - name: Install cosign | |
| uses: sigstore/cosign-installer@09a077b27eb1310dcfb21981bee195b30ce09de0 # tag=v2.5.0 | |
| - name: Install crane | |
| if: ${{ github.event_name != 'pull_request' }} | |
| uses: imjasonh/setup-crane@e82f1b9a8007d399333baba4d75915558e9fb6a4 # tag=v0.2 | |
| - name: Push container | |
| if: ${{ github.event_name != 'pull_request' }} | |
| run: | | |
| make push-container | |
| - name: Sign container | |
| env: | |
| COSIGN_EXPERIMENTAL: true | |
| run: | | |
| make sign-container |