binaries.yml

---
name: binaries

"on":
  workflow_dispatch:
  pull_request:
    branches:
      - master
  push:
    branches:
      - master
    tags:
      - v*

permissions:
  contents: write

jobs:
  binaries:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout source
        id: source
        uses: actions/checkout@v4

      - name: Setup golang
        id: golang
        uses: actions/setup-go@v5
        with:
          go-version: ^1.23.0

      - name: Run generate
        id: generate
        run: make generate

      - name: Run release
        id: release
        run: make release

      - name: Sign release
        id: gpgsign
        if: startsWith(github.ref, 'refs/tags/')
        uses: actionhippie/gpgsign@v1
        with:
          private_key: ${{ secrets.GNUPG_KEY }}
          passphrase: ${{ secrets.GNUPG_PASSWORD }}
          detach_sign: true
          files: dist/*
          excludes: dist/*.sha256

      - name: Build changes
        id: changelog
        if: startsWith(github.ref, 'refs/tags/')
        uses: actionhippie/calens@v1
        with:
          version: ${{ github.ref }}

      - name: Upload release
        id: upload
        if: startsWith(github.ref, 'refs/tags/')
        uses: ncipollo/release-action@v1
        with:
          body: ${{ steps.changelog.outputs.generated }}
          artifacts: dist/*

...