-
Notifications
You must be signed in to change notification settings - Fork 31
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #9 from signalsciences/SignOnRelease
Sign and release on github actions
- Loading branch information
Showing
3 changed files
with
109 additions
and
12 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,49 @@ | ||
| # This GitHub action can publish assets for release when a tag is created. | ||
| # Currently its setup to run on any tag that matches the pattern "v*" (ie. v0.1.0). | ||
| # | ||
| # This uses an action (paultyng/ghaction-import-gpg) that assumes you set your | ||
| # private key in the `GPG_PRIVATE_KEY` secret and passphrase in the `PASSPHRASE` | ||
| # secret. If you would rather own your own GPG handling, please fork this action | ||
| # or use an alternative one for key handling. | ||
| # | ||
| # You will need to pass the `--batch` flag to `gpg` in your signing step | ||
| # in `goreleaser` to indicate this is being used in a non-interactive mode. | ||
| # | ||
| name: release | ||
| on: | ||
| push: | ||
| tags: | ||
| - 'v*' | ||
|
|
||
| jobs: | ||
| goreleaser: | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - | ||
| name: Checkout | ||
| uses: actions/checkout@v2 | ||
| - | ||
| name: Unshallow | ||
| run: git fetch --prune --unshallow | ||
| - | ||
| name: Set up Go | ||
| uses: actions/setup-go@v2 | ||
| with: | ||
| go-version: 1.14 | ||
| - | ||
| name: Import GPG key | ||
| id: import_gpg | ||
| uses: crazy-max/ghaction-import-gpg@v3 | ||
| with: | ||
| gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }} | ||
| passphrase: ${{ secrets.PASSPHRASE }} | ||
| - | ||
| name: Run GoReleaser | ||
| uses: goreleaser/goreleaser-action@v2 | ||
| with: | ||
| version: latest | ||
| args: release --rm-dist | ||
| env: | ||
| GPG_TTY: $(tty) | ||
| GPG_FINGERPRINT: ${{ steps.import_gpg.outputs.fingerprint }} | ||
| GITHUB_TOKEN: ${{ secrets.GH_TOKEN }} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,60 @@ | ||
| # Visit https://goreleaser.com for documentation on how to customize this | ||
| # behavior. | ||
| project_name: terraform-provider-sigsci | ||
| before: | ||
| hooks: | ||
| # this is just an example and not a requirement for provider building/publishing | ||
| - go mod tidy | ||
| builds: | ||
| - env: | ||
| # goreleaser does not work with CGO, it could also complicate | ||
| # usage by users in CI/CD systems like Terraform Cloud where | ||
| # they are unable to install libraries. | ||
| - CGO_ENABLED=0 | ||
| mod_timestamp: '{{ .CommitTimestamp }}' | ||
| flags: | ||
| - -trimpath | ||
| ldflags: | ||
| - '-s -w -X main.version={{.Version}} -X main.commit={{.Commit}}' | ||
| goos: | ||
| - freebsd | ||
| - windows | ||
| - linux | ||
| - darwin | ||
| goarch: | ||
| - amd64 | ||
| - '386' | ||
| - arm | ||
| - arm64 | ||
| ignore: | ||
| - goos: darwin | ||
| goarch: '386' | ||
| binary: '{{ .ProjectName }}_v{{ .Version }}' | ||
| archives: | ||
| - format: zip | ||
| name_template: '{{ .ProjectName }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}' | ||
| checksum: | ||
| name_template: '{{ .ProjectName }}_{{ .Version }}_SHA256SUMS' | ||
| algorithm: sha256 | ||
| signs: | ||
| - artifacts: checksum | ||
| cmd: gpg | ||
| args: | ||
| # if you are using this is a GitHub action or some other automated pipeline, you | ||
| # need to pass the batch flag to indicate its not interactive. | ||
| - "--batch" | ||
| - "--local-user" | ||
| - "{{ .Env.GPG_FINGERPRINT }}" # set this environment variable for your signing key | ||
| - "--output" | ||
| - "${signature}" | ||
| - "--detach-sign" | ||
| - "${artifact}" | ||
| release: | ||
| # If you want to manually examine the release before its live, uncomment this line: | ||
| # draft: true | ||
| github: | ||
| owner: github-actions-sigsci | ||
| name: signalsciences/terraform-provider-sigsci | ||
| name_template: "{{.ProjectName}}-v{{.Version}}" | ||
| changelog: | ||
| skip: true |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters