Add Google Artifact Registry to publish workflow (#53)

* Initial plan

* Add Google Cloud Registry support to publish workflow

Co-authored-by: ziflex <1607148+ziflex@users.noreply.github.com>

* Use Google Artifact Registry instead of GCR

Co-authored-by: ziflex <1607148+ziflex@users.noreply.github.com>

* Add id-token write permission for GCP authentication

Co-authored-by: ziflex <1607148+ziflex@users.noreply.github.com>

* Use Workload Identity Federation for GCP authentication

Co-authored-by: ziflex <1607148+ziflex@users.noreply.github.com>

* Use secrets with GCP_ prefix for workload identity configuration

Co-authored-by: ziflex <1607148+ziflex@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: ziflex <1607148+ziflex@users.noreply.github.com>

Author: Copilot

.github/workflows/release.yml

@@ -8,6 +8,7 @@ on:
 permissions:
   contents: write
   packages: write
+  id-token: write
 
 jobs:
   goreleaser:
@@ -36,10 +37,23 @@ jobs:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
+      - id: 'auth'
+        name: 'Authenticate to Google Cloud'
+        uses: 'google-github-actions/auth@v1'
+        with:
+          create_credentials_file: true
+          workload_identity_provider: ${{ secrets.GCP_WORKLOAD_IDENTITY_PROVIDER }}
+          service_account: ${{ secrets.GCP_SERVICE_ACCOUNT_EMAIL }}
+      - name: Login to Google Artifact Registry
+        uses: docker/login-action@v3
+        with:
+          registry: us-east1-docker.pkg.dev
+          username: oauth2accesstoken
+          password: ${{ steps.auth.outputs.access_token }}
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v6
         with:
           version: latest
           args: release --clean
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.goreleaser.yml

@@ -50,6 +50,9 @@ dockers:
       - "ghcr.io/montferret/{{ .ProjectName }}:{{ .Major }}.{{ .Minor }}.{{ .Patch }}"
       - "ghcr.io/montferret/{{ .ProjectName }}:{{ .Major }}.{{ .Minor }}"
       - "ghcr.io/montferret/{{ .ProjectName }}:latest"
+      - "us-east1-docker.pkg.dev/montferret/{{ .ProjectName }}:{{ .Major }}.{{ .Minor }}.{{ .Patch }}"
+      - "us-east1-docker.pkg.dev/montferret/{{ .ProjectName }}:{{ .Major }}.{{ .Minor }}"
+      - "us-east1-docker.pkg.dev/montferret/{{ .ProjectName }}:latest"
     build_flag_templates:
       - "--pull"
       - "--label=org.opencontainers.image.created={{.Date}}"
@@ -69,4 +72,4 @@ changelog:
   filters:
     exclude:
       - '^docs:'
-      - '^test:'
+      - '^test:'