ci.yml

name: CI

on:
  push:
    branches:
      - master
    tags:
      - "v[0-9]+.[0-9]+.[0-9]+*"
  pull_request:
    branches:
      - master

permissions:
  contents: read

jobs:
  build:
    name: Build
    runs-on: ubuntu-22.04
    permissions:
      contents: write
      id-token: write
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v4.1.4
        with:
          fetch-depth: 0

      - name: Setup Golang Environment
        uses: actions/setup-go@v5.0.0
        with:
          go-version: stable

      - name: Download Syft
        uses: anchore/sbom-action/download-syft@v0.15.11
        if: github.ref_type == 'tag'

      - name: Install Cosign
        uses: sigstore/cosign-installer@v3.5.0
        if: github.ref_type == 'tag'

      - name: Build binary
        uses: goreleaser/goreleaser-action@v5.0.0
        with:
          version: latest
          args: ${{ github.ref_type == 'tag' && 'release' || 'build --snapshot' }} --clean
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}