mirror of
https://github.com/mikefarah/yq.git
synced 2026-06-27 07:27:49 +00:00
9a0335abb2
* Initial plan * fix: add least-privilege token permissions to GitHub workflows (OSSF) Agent-Logs-Url: https://github.com/mikefarah/yq/sessions/1b5db5e2-af78-4289-a6e0-2e972fc68ef1 Co-authored-by: mikefarah <1151925+mikefarah@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: mikefarah <1151925+mikefarah@users.noreply.github.com>
65 lines
1.8 KiB
YAML
65 lines
1.8 KiB
YAML
name: Release YQ
|
|
on:
|
|
push:
|
|
tags:
|
|
- 'v4.*'
|
|
- 'draft-*'
|
|
|
|
permissions: {}
|
|
|
|
jobs:
|
|
publishGitRelease:
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: write
|
|
id-token: write
|
|
steps:
|
|
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
- uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
|
|
with:
|
|
go-version: '^1.20'
|
|
check-latest: true
|
|
- name: Compile man page markup
|
|
id: gen-man-page-md
|
|
run: |
|
|
./scripts/generate-man-page-md.sh
|
|
|
|
- name: Get the version
|
|
id: get_version
|
|
run: echo "VERSION=${GITHUB_REF##*/}" >> "${GITHUB_OUTPUT}"
|
|
|
|
- name: Generate man page
|
|
uses: docker://pandoc/core:2.14.2
|
|
id: gen-man-page
|
|
with:
|
|
args: >-
|
|
--standalone
|
|
--to man
|
|
--variable=title:"YQ"
|
|
--variable=section:"1"
|
|
--variable=header:"yq (https://github.com/mikefarah/yq/) version ${{ steps.get_version.outputs.VERSION }}"
|
|
--variable=author:"Mike Farah"
|
|
--output=yq.1
|
|
man.md
|
|
|
|
- name: Install cosign
|
|
uses: sigstore/cosign-installer@v3
|
|
|
|
- name: Cross compile
|
|
run: |
|
|
sudo apt-get install rhash -y
|
|
go install github.com/goreleaser/goreleaser/v2@latest
|
|
./scripts/xcompile.sh
|
|
|
|
- name: Sign checksums
|
|
run: |
|
|
cosign sign-blob --yes --output-bundle build/checksums.bundle build/checksums
|
|
cosign sign-blob --yes --output-bundle build/checksums-bsd.bundle build/checksums-bsd
|
|
|
|
- name: Release
|
|
uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2.6.2
|
|
with:
|
|
files: build/*
|
|
draft: true
|
|
fail_on_unmatched_files: true
|