release.yml

name: release

on:
  push:
    tags:
      - 'v*'

permissions:
   contents: write # Release
   id-token: write # Sign

jobs:
  goreleaser:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v3
        with:
          fetch-depth: 0

      - name: Set up Go
        uses: actions/setup-go@v4
        with:
          go-version-file: 'go.mod'

      - name: Manage Go dependencies
        run: go mod tidy && git diff --exit-code && go mod download && go mod verify

      - name: Build and test
        run: make check

      - name: Build docs
        run: make docs

      - name: Install Cosign
        uses: sigstore/cosign-installer@v3.1.1

      - name: Determine API version
        id: plugin_describe
        run: echo "api_version=$(go run . describe | jq -r '.api_version')" >> $GITHUB_OUTPUT

      - name: Run GoReleaser
        uses: goreleaser/goreleaser-action@v4
        with:
          version: latest
          args: release --clean
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          API_VERSION: ${{ steps.plugin_describe.outputs.api_version }}