forked from drew/smtprelay
189771062a
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.14.0 to 2.14.1.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](20cf305ff2...e3f713f2d8)
---
updated-dependencies:
- dependency-name: step-security/harden-runner
dependency-version: 2.14.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
64 lines
2.0 KiB
YAML
64 lines
2.0 KiB
YAML
name: Release Go Binaries
|
|
|
|
on:
|
|
release:
|
|
types: [created]
|
|
workflow_dispatch:
|
|
inputs:
|
|
release_tag:
|
|
description: 'Tag name to build (v1.3.1)'
|
|
required: false
|
|
default: ''
|
|
|
|
# Declare default permissions as read only.
|
|
permissions: read-all
|
|
|
|
jobs:
|
|
releases-matrix:
|
|
name: Release Go Binary
|
|
runs-on: ubuntu-latest
|
|
strategy:
|
|
matrix:
|
|
goos: [freebsd, linux, windows]
|
|
goarch: [amd64, arm64]
|
|
permissions:
|
|
contents: write
|
|
packages: write
|
|
|
|
steps:
|
|
- name: Harden Runner
|
|
uses: step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1
|
|
with:
|
|
egress-policy: audit
|
|
|
|
- name: Determine ref to checkout
|
|
run: |
|
|
# If manually invoked with a release_tag input, use refs/tags/<release_tag>.
|
|
if [ "${{ github.event_name }}" = "workflow_dispatch" ] && [ -n "${{ github.event.inputs.release_tag }}" ]; then
|
|
echo "REF=refs/tags/${{ github.event.inputs.release_tag }}" >> $GITHUB_ENV
|
|
else
|
|
# For release events GITHUB_REF is already refs/tags/<tag>; otherwise fall back to the incoming ref.
|
|
echo "REF=${GITHUB_REF}" >> $GITHUB_ENV
|
|
fi
|
|
|
|
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
with:
|
|
ref: ${{ env.REF }}
|
|
|
|
- name: Set APP_VERSION env
|
|
run: |
|
|
# basename strips refs/... and yields the tag or branch name
|
|
echo "APP_VERSION=$(basename ${REF})" >> $GITHUB_ENV
|
|
|
|
- name: Set BUILD_TIME env
|
|
run: echo BUILD_TIME=$(date) >> ${GITHUB_ENV}
|
|
|
|
- uses: wangyoucao577/go-release-action@279495102627de7960cbc33434ab01a12bae144b # v1.55
|
|
with:
|
|
github_token: ${{ secrets.GITHUB_TOKEN }}
|
|
goos: ${{ matrix.goos }}
|
|
goarch: ${{ matrix.goarch }}
|
|
extra_files: LICENSE README.md smtprelay.ini
|
|
ldflags: -s -w -X "main.appVersion=${{ env.APP_VERSION }}" -X "main.buildTime=${{ env.BUILD_TIME }}"
|
|
release_tag: ${{ env.APP_VERSION }}
|