release.yml

# goreleaser knows not to publish when the trigger is _not_ a tag

name: Release

on:
  pull_request:
  push:
    tags:
      - v*
    branches:
      - master
    
jobs:
  goreleaser:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      
    steps:
      - name: Checkout
        uses: actions/checkout@v3
            
      - name: Set up Go
        uses: actions/setup-go@v4
        with:
          go-version: "1.21"

      - uses: docker/setup-buildx-action@v3

      - uses: actions/cache@v3
        with:
          path: |
            ~/.cache/go-build
            ~/go/pkg/mod
          key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
          restore-keys: |
            ${{ runner.os }}-go-

      - run: make test

      - name: Login to DockerHub
        if: startsWith(github.ref, 'refs/tags/')
        uses: docker/login-action@v2
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}
            
      - uses: goreleaser/goreleaser-action@v4
        name: Goreleaser
        with:
          version: latest
          args: release --rm-dist ${{ !startsWith(github.ref, 'refs/tags/') && '--snapshot' || '' }}
        env:
          GITHUB_TOKEN: ${{ secrets.ORG_GH_TOKEN }}