Skip to content

Commit 07ea1f3

Browse files
dopeydopey
committed
Testing new job
1 parent 8019f70 commit 07ea1f3

File tree

1 file changed

+147
-134
lines changed

1 file changed

+147
-134
lines changed

‎.github/workflows/release.yml‎

Lines changed: 147 additions & 134 deletions
Original file line numberDiff line numberDiff line change
@@ -69,142 +69,155 @@ jobs:
6969
draft: false
7070
prerelease: ${{ steps.is_prerelease.outputs.IS_PRERELEASE }}
7171

72-
goreleaser:
73-
name: Upload Assets to Github w/ goreleaser
74-
runs-on: ubuntu-latest
75-
needs: create_release
76-
permissions:
77-
id-token: write
78-
contents: write
79-
packages: write
80-
env:
81-
GPG_PRIVATE_KEY_FILE: "0x889B19391F774443-Certify.key"
82-
steps:
83-
- name: Checkout
84-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
85-
with:
86-
fetch-depth: 0
87-
88-
- name: setup release environment
89-
run: |-
90-
# shellcheck disable=SC2129
91-
echo 'GITHUB_TOKEN=${{ secrets.GITHUB_TOKEN }}' > .release-env
92-
{ echo 'GORELEASER_KEY=${{ secrets.GORELEASER_KEY }}'; \
93-
echo 'AWS_ACCESS_KEY_ID=${{ secrets.AWS_ACCESS_KEY_ID }}'; \
94-
echo 'AWS_S3_BUCKET=${{ secrets.AWS_S3_BUCKET }}'; \
95-
echo 'AWS_S3_REGION=${{ secrets.AWS_S3_REGION }}'; \
96-
echo 'AWS_SECRET_ACCESS_KEY=${{ secrets.AWS_SECRET_ACCESS_KEY }}'; \
97-
echo 'GPG_PRIVATE_KEY_FILE=${{ env.GPG_PRIVATE_KEY_FILE }}'; \
98-
echo 'NFPM_PASSPHRASE=${{ secrets.GPG_PRIVATE_KEY_PASSWORD }}'; } >> .release-env
99-
100-
- name: Write GPG private key to file
101-
run: |
102-
echo "${GPG_PRIVATE_KEY}" > "${GPG_PRIVATE_KEY_FILE}"
103-
shell: bash
104-
env:
105-
GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
106-
107-
- name: Build binaries
108-
run: make release
109-
110-
- name: Authenticate to Google Cloud
111-
if: ${{ needs.create_release.outputs.is_prerelease == 'false' }}
112-
id: gcloud-auth
113-
uses: google-github-actions/auth@v2
114-
with:
115-
token_format: access_token
116-
workload_identity_provider: ${{ secrets.GOOGLE_CLOUD_WORKLOAD_IDENTITY_PROVIDER }}
117-
service_account: ${{ secrets.GOOGLE_CLOUD_GITHUB_SERVICE_ACCOUNT }}
118-
119-
- name: Set up Google Cloud SDK
120-
if: ${{ needs.create_release.outputs.is_prerelease == 'false' }}
121-
uses: google-github-actions/setup-gcloud@v2
122-
with:
123-
project_id: ${{ secrets.GOOGLE_CLOUD_PACKAGES_PROJECT_ID }}
124-
125-
- name: Get Release Date
126-
id: release_date
127-
run: |
128-
# shellcheck disable=SC2129
129-
RELEASE_DATE=$(date -u +"%y-%m-%d")
130-
echo "RELEASE_DATE=${RELEASE_DATE}" >> "${GITHUB_ENV}"
131-
echo 'IS_PRERELEASE=${{ needs.create_release.outputs.is_prerelease }}' >> "${GITHUB_ENV}"
132-
133-
- name: Run GoReleaser Pro
134-
uses: goreleaser/[email protected]
135-
with:
136-
distribution: goreleaser-pro
137-
version: v2.8.1
138-
args: publish
139-
env:
140-
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
141-
AWS_S3_BUCKET: ${{ secrets.AWS_S3_BUCKET }}
142-
AWS_S3_REGION: ${{ secrets.AWS_S3_REGION }}
143-
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
144-
GITHUB_TOKEN: ${{ secrets.GORELEASER_PAT }}
145-
GORELEASER_KEY: ${{ secrets.GORELEASER_KEY }}
146-
NFPM_PASSPHRASE: ${{ secrets.GPG_PRIVATE_KEY_PASSWORD }}
147-
RELEASE_DATE: ${{ env.RELEASE_DATE }}
148-
IS_PRERELEASE: ${{ needs.create_release.outputs.is_prerelease }}
149-
150-
- name: Shred and remove GPG private key
151-
run: |
152-
shred -zun 3 "${GPG_PRIVATE_KEY_FILE}"
153-
shred -zun 3 .release-env
154-
shell: bash
155-
156-
build_upload_docker:
157-
name: Build & Upload Docker Image
158-
needs: create_release
159-
permissions:
160-
id-token: write
161-
contents: write
162-
uses: smallstep/workflows/.github/workflows/docker-buildx-push.yml@main
163-
with:
164-
platforms: linux/amd64,linux/arm64,linux/386,linux/arm
165-
tags: ${{ needs.create_release.outputs.docker_tags }}
166-
docker_image: smallstep/step-kms-plugin
167-
docker_file: docker/Dockerfile
168-
secrets: inherit
169-
170-
build_upload_docker_debian:
171-
name: Build & Upload Debian Docker Image
172-
needs: create_release
72+
#goreleaser:
73+
# name: Upload Assets to Github w/ goreleaser
74+
# runs-on: ubuntu-latest
75+
# needs: create_release
76+
# permissions:
77+
# id-token: write
78+
# contents: write
79+
# packages: write
80+
# env:
81+
# GPG_PRIVATE_KEY_FILE: "0x889B19391F774443-Certify.key"
82+
# steps:
83+
# - name: Checkout
84+
# uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
85+
# with:
86+
# fetch-depth: 0
87+
88+
# - name: setup release environment
89+
# run: |-
90+
# # shellcheck disable=SC2129
91+
# echo 'GITHUB_TOKEN=${{ secrets.GITHUB_TOKEN }}' > .release-env
92+
# { echo 'GORELEASER_KEY=${{ secrets.GORELEASER_KEY }}'; \
93+
# echo 'AWS_ACCESS_KEY_ID=${{ secrets.AWS_ACCESS_KEY_ID }}'; \
94+
# echo 'AWS_S3_BUCKET=${{ secrets.AWS_S3_BUCKET }}'; \
95+
# echo 'AWS_S3_REGION=${{ secrets.AWS_S3_REGION }}'; \
96+
# echo 'AWS_SECRET_ACCESS_KEY=${{ secrets.AWS_SECRET_ACCESS_KEY }}'; \
97+
# echo 'GPG_PRIVATE_KEY_FILE=${{ env.GPG_PRIVATE_KEY_FILE }}'; \
98+
# echo 'NFPM_PASSPHRASE=${{ secrets.GPG_PRIVATE_KEY_PASSWORD }}'; } >> .release-env
99+
100+
# - name: Write GPG private key to file
101+
# run: |
102+
# echo "${GPG_PRIVATE_KEY}" > "${GPG_PRIVATE_KEY_FILE}"
103+
# shell: bash
104+
# env:
105+
# GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
106+
107+
# - name: Build binaries
108+
# run: make release
109+
110+
# - name: Authenticate to Google Cloud
111+
# if: ${{ needs.create_release.outputs.is_prerelease == 'false' }}
112+
# id: gcloud-auth
113+
# uses: google-github-actions/auth@v2
114+
# with:
115+
# token_format: access_token
116+
# workload_identity_provider: ${{ secrets.GOOGLE_CLOUD_WORKLOAD_IDENTITY_PROVIDER }}
117+
# service_account: ${{ secrets.GOOGLE_CLOUD_GITHUB_SERVICE_ACCOUNT }}
118+
119+
# - name: Set up Google Cloud SDK
120+
# if: ${{ needs.create_release.outputs.is_prerelease == 'false' }}
121+
# uses: google-github-actions/setup-gcloud@v2
122+
# with:
123+
# project_id: ${{ secrets.GOOGLE_CLOUD_PACKAGES_PROJECT_ID }}
124+
125+
# - name: Get Release Date
126+
# id: release_date
127+
# run: |
128+
# # shellcheck disable=SC2129
129+
# RELEASE_DATE=$(date -u +"%y-%m-%d")
130+
# echo "RELEASE_DATE=${RELEASE_DATE}" >> "${GITHUB_ENV}"
131+
# echo 'IS_PRERELEASE=${{ needs.create_release.outputs.is_prerelease }}' >> "${GITHUB_ENV}"
132+
133+
# - name: Run GoReleaser Pro
134+
# uses: goreleaser/[email protected]
135+
# with:
136+
# distribution: goreleaser-pro
137+
# version: v2.8.1
138+
# args: publish
139+
# env:
140+
# AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
141+
# AWS_S3_BUCKET: ${{ secrets.AWS_S3_BUCKET }}
142+
# AWS_S3_REGION: ${{ secrets.AWS_S3_REGION }}
143+
# AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
144+
# GITHUB_TOKEN: ${{ secrets.GORELEASER_PAT }}
145+
# GORELEASER_KEY: ${{ secrets.GORELEASER_KEY }}
146+
# NFPM_PASSPHRASE: ${{ secrets.GPG_PRIVATE_KEY_PASSWORD }}
147+
# RELEASE_DATE: ${{ env.RELEASE_DATE }}
148+
# IS_PRERELEASE: ${{ needs.create_release.outputs.is_prerelease }}
149+
150+
# - name: Shred and remove GPG private key
151+
# run: |
152+
# shred -zun 3 "${GPG_PRIVATE_KEY_FILE}"
153+
# shred -zun 3 .release-env
154+
# shell: bash
155+
156+
#build_upload_docker:
157+
# name: Build & Upload Docker Image
158+
# needs: create_release
159+
# permissions:
160+
# id-token: write
161+
# contents: write
162+
# uses: smallstep/workflows/.github/workflows/docker-buildx-push.yml@main
163+
# with:
164+
# platforms: linux/amd64,linux/arm64,linux/386,linux/arm
165+
# tags: ${{ needs.create_release.outputs.docker_tags }}
166+
# docker_image: smallstep/step-kms-plugin
167+
# docker_file: docker/Dockerfile
168+
# secrets: inherit
169+
170+
#build_upload_docker_debian:
171+
# name: Build & Upload Debian Docker Image
172+
# needs: create_release
173+
# permissions:
174+
# id-token: write
175+
# contents: write
176+
# uses: smallstep/workflows/.github/workflows/docker-buildx-push.yml@main
177+
# with:
178+
# platforms: linux/amd64,linux/386,linux/arm,linux/arm64
179+
# tags: ${{ needs.create_release.outputs.docker_tags_debian }}
180+
# docker_image: smallstep/step-kms-plugin
181+
# docker_file: docker/Dockerfile.debian
182+
# secrets: inherit
183+
184+
#build_upload_docker_cloud:
185+
# name: Build & Upload Cloud-Only Docker Image
186+
# needs: create_release
187+
# permissions:
188+
# id-token: write
189+
# contents: write
190+
# uses: smallstep/workflows/.github/workflows/docker-buildx-push.yml@main
191+
# with:
192+
# platforms: linux/amd64,linux/arm64,linux/386,linux/arm
193+
# tags: ${{ needs.create_release.outputs.docker_tags_cloud }}
194+
# docker_image: smallstep/step-kms-plugin
195+
# docker_file: docker/Dockerfile.cloud
196+
# secrets: inherit
197+
198+
#build_upload_docker_wolfi:
199+
# name: Build & Upload Wolfi Docker Image
200+
# needs: create_release
201+
# permissions:
202+
# id-token: write
203+
# contents: write
204+
# uses: smallstep/workflows/.github/workflows/docker-buildx-push.yml@main
205+
# with:
206+
# platforms: linux/amd64
207+
# tags: ${{ needs.create_release.outputs.docker_tags_wolfi }}
208+
# docker_image: smallstep/step-kms-plugin
209+
# docker_file: docker/Dockerfile.wolfi
210+
# secrets: inherit
211+
212+
codesign_builds:
213+
name: Codesign Artifacts
214+
#needs: ci
173215
permissions:
174-
id-token: write
216+
actions: read
175217
contents: write
176-
uses: smallstep/workflows/.github/workflows/docker-buildx-push.yml@main
177-
with:
178-
platforms: linux/amd64,linux/386,linux/arm,linux/arm64
179-
tags: ${{ needs.create_release.outputs.docker_tags_debian }}
180-
docker_image: smallstep/step-kms-plugin
181-
docker_file: docker/Dockerfile.debian
182-
secrets: inherit
183-
184-
build_upload_docker_cloud:
185-
name: Build & Upload Cloud-Only Docker Image
186-
needs: create_release
187-
permissions:
188218
id-token: write
189-
contents: write
190-
uses: smallstep/workflows/.github/workflows/docker-buildx-push.yml@main
191-
with:
192-
platforms: linux/amd64,linux/arm64,linux/386,linux/arm
193-
tags: ${{ needs.create_release.outputs.docker_tags_cloud }}
194-
docker_image: smallstep/step-kms-plugin
195-
docker_file: docker/Dockerfile.cloud
219+
packages: write
220+
security-events: write
221+
uses: smallstep/step-kms-plugin-private/.github/workflows/release.yml@main
196222
secrets: inherit
197223

198-
build_upload_docker_wolfi:
199-
name: Build & Upload Wolfi Docker Image
200-
needs: create_release
201-
permissions:
202-
id-token: write
203-
contents: write
204-
uses: smallstep/workflows/.github/workflows/docker-buildx-push.yml@main
205-
with:
206-
platforms: linux/amd64
207-
tags: ${{ needs.create_release.outputs.docker_tags_wolfi }}
208-
docker_image: smallstep/step-kms-plugin
209-
docker_file: docker/Dockerfile.wolfi
210-
secrets: inherit

0 commit comments

Comments
 (0)