mirror of
https://github.com/gopasspw/gopass.git
synced 2026-10-04 14:57:51 +02:00
dependabot[bot]
88bae9768e
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.13.1 to 2.13.2. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a...95d9a5deda9de15063e7595e9719c11c38c90ae2) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.13.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
102 lines
3.6 KiB
YAML
102 lines
3.6 KiB
YAML
# This is a basic workflow to help you get started with Actions
|
|
|
|
name: release
|
|
|
|
# Controls when the action will run.
|
|
on:
|
|
# Triggers the workflow on push or pull request events but only for the master branch
|
|
push:
|
|
tags:
|
|
- 'v*'
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
goreleaser:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Harden Runner
|
|
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
|
|
with:
|
|
egress-policy: audit
|
|
|
|
-
|
|
name: Checkout
|
|
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
|
|
with:
|
|
fetch-depth: 0
|
|
-
|
|
name: Set up Go
|
|
uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
|
|
with:
|
|
go-version: '1.25'
|
|
- uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
|
|
with:
|
|
path: ~/go/pkg/mod
|
|
key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
|
|
restore-keys: |
|
|
${{ runner.os }}-go-
|
|
- uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0
|
|
- uses: anchore/sbom-action/download-syft@fbfd9c6c189226748411491745178e0c2017392d # v0.20.10
|
|
# ubuntu is missing wixl https://github.com/actions/virtual-environments/issues/3857
|
|
-
|
|
name: "Install GNOME msitools (wixl)"
|
|
run: sudo apt update -qq && sudo apt install -qq -y wixl
|
|
-
|
|
name: Import GPG signing key
|
|
id: import_gpg
|
|
uses: crazy-max/ghaction-import-gpg@e89d40939c28e39f97cf32126055eeae86ba74ec # v6.3.0
|
|
with:
|
|
gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
|
|
passphrase: ${{ secrets.PASSPHRASE }}
|
|
-
|
|
name: Debug
|
|
run: |
|
|
echo "GPG ---------------------"
|
|
echo "fingerprint: ${{ steps.import_gpg.outputs.fingerprint }}"
|
|
echo "keyid: ${{ steps.import_gpg.outputs.keyid }}"
|
|
echo "name: ${{ steps.import_gpg.outputs.name }}"
|
|
echo "email: ${{ steps.import_gpg.outputs.email }}"
|
|
echo "Go env ------------------"
|
|
pwd
|
|
echo ${HOME}
|
|
echo ${GITHUB_WORKSPACE}
|
|
echo ${GOPATH}
|
|
echo ${GOROOT}
|
|
env
|
|
-
|
|
name: Generate release-notes
|
|
run: |
|
|
go run helpers/changelog/main.go >../RELEASE_NOTES
|
|
-
|
|
name: Run GoReleaser
|
|
uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a # v6.4.0
|
|
with:
|
|
version: latest
|
|
args: release --release-notes=../RELEASE_NOTES
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GH_PAT }}
|
|
GPG_FINGERPRINT: ${{ steps.import_gpg.outputs.fingerprint }}
|
|
GOPATH: /home/runner/go
|
|
-
|
|
name: "Add Windows installer (msi) to release"
|
|
run: | # until https://github.com/goreleaser/goreleaser/issues/1295, disabled until #2038 is fixed
|
|
tag="${GITHUB_REF#refs/tags/}"
|
|
version=${tag#v}
|
|
make msi
|
|
msi=dist/gopass-x64-windows-${version}.msi
|
|
gh release upload "${tag}" "${msi}"
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GH_PAT }}
|
|
-
|
|
name: "Upload deb files to apt hosting"
|
|
run: |
|
|
for D in dist/*.deb; do
|
|
curl -H"X-Filename: ${D}" -H"X-Apikey: ${APIKEY}" -XPOST --data-binary @$D https://packages.gopass.pw/repos/gopass/upload
|
|
curl -H"X-Filename: ${D}" -H"X-Apikey: ${APIKEY}" -XPOST --data-binary @$D https://packages.gopass.pw/repos/gopass-unstable/upload
|
|
done
|
|
env:
|
|
APIKEY: ${{ secrets.APT_APIKEY }}
|
|
|