test release worflow #23

Author: binarycodes

.github/workflows/go-build.yml

@@ -51,3 +51,9 @@ jobs:
           name: ${{ inputs.artifact }}-${{ matrix.go-version }}
           path: ${{ inputs.service}}/bin/${{ inputs.artifact }}
           retention-days: 5
+
+      - name: set output for build files
+        id: outputs
+        run: |
+          echo "::set-output name=binary_x64::${{ inputs.service}}/bin/${{ inputs.artifact }}"
+          echo "::set-output name=binary_name::${{ inputs.artifact }}"

.github/workflows/release-workflow.yml

@@ -99,13 +99,21 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - name: "create pre release"
-        uses: marvinpinto/action-automatic-releases@latest
+      - name: Create release
+        id: create_release
+        uses: actions/create-release@v1
         with:
-          repo_token: "${{ secrets.GITHUB_TOKEN }}"
-          automatic_release_tag: "latest"
+          tag_name: ${{ github.ref }}  # The tag that triggered the release
+          release_name: Release ${{ github.ref }}
+          draft: true
           prerelease: true
-          title: "Development Build"
-          files: |
-            LICENSE.txt
-            go-ssh-signer/bin/ssh-keysign
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: upload amd64 go binary as release asset
+        uses: actions/upload-release-asset@v1
+        with:
+          upload_url: ${{ steps.create_release.outputs.upload_url }}
+          asset_path: ${{ needs.go-build.outputs.binary_x64 }}  # Path to arm64 binary from reusable workflow's output
+          asset_name: ${{ needs.go-build.outputs.binary_name }}-linux-amd64
+          asset_content_type: application/octet-stream  # Content type for binaries

.github/workflows/ssh-key-signer-server-docker.yml

@@ -79,6 +79,10 @@ jobs:
             APP_NAME=${{ steps.extract_version.outputs.MAVEN_NAME }}
             APP_VERSION=${{ steps.extract_version.outputs.MAVEN_VERSION }}
 
+      - name: Install Cosign
+        if: startsWith(github.ref, 'refs/tags/v')
+        uses: sigstore/cosign-installer@v3.8.1
+
       - name: sign the published docker image
         if: startsWith(github.ref, 'refs/tags/v')
         env: