add GoReleaser and Govulncheck actions

.github/workflows/release.yml

@@ -0,0 +1,37 @@
+name: release
+on:
+  push:
+    tags:
+      - '*'
+permissions:
+  contents: write
+jobs:
+  goreleaser:
+    runs-on: ubuntu-latest
+    env:
+      DOCKER_CLI_EXPERIMENTAL: "enabled"
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v1
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GH_GORELEASER_TOKEN }}
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: 1.24
+      - name: Run GoReleaser
+        uses: goreleaser/goreleaser-action@v6
+        with:
+          version: '~> 2.9'
+          args: release --clean
+          workdir: src
+        env:
+          GITHUB_TOKEN: ${{ secrets.GH_GORELEASER_TOKEN }}

.github/workflows/vulncheck.yml

@@ -0,0 +1,12 @@
+on: [push]
+jobs:
+  govulncheck_job:
+    runs-on: ubuntu-latest
+    name: Run govulncheck
+    steps:
+      - id: govulncheck
+        uses: golang/govulncheck-action@v1
+        with:
+          go-version-input: 1.24
+          go-package: ./...
+          work-dir: src

shell.nix

@@ -12,5 +12,8 @@ pkgs.mkShell {
 
   CGO_ENABLED = 0;
 
-  shellHook = '''';
+  shellHook = ''
+    echo "Exporting GITHUB_TOKEN..."
+    export GITHUB_TOKEN=$(cat ~/.config/goreleaser/github_token || echo NOT_FOUND)
+  '';
 }

src/.goreleaser.yaml

@@ -0,0 +1,81 @@
+# yaml-language-server: $schema=https://goreleaser.com/static/schema.json
+# vim: set ts=2 sw=2 tw=0 fo=cnqoj
+version: 2
+project_name: ledlighter
+dist: ../dist/
+env_files:
+  gitlab_token: ~/nope
+  gitea_token: ~/nope
+release:
+  github:
+    owner: xenos76
+    name: ledlighter
+before:
+  hooks:
+    - go mod tidy
+    - go test
+builds:
+  - env:
+      - CGO_ENABLED=0
+    goos:
+      - linux
+      - darwin
+    goarch:
+      - amd64
+      - arm64
+    ldflags:
+      - -s -w -X main.appVersion={{.Version}} -X main.buildDate={{.Date}}
+archives:
+  - formats: ["zip", "tar.gz"]
+    name_template: >-
+      {{ .ProjectName }}_ {{- title .Os }}_ {{- if eq .Arch "amd64" }}x86_64 {{- else }}{{ .Arch }}{{ end }} {{- if .Arm }}v{{ .Arm }}{{ end }}
+dockers:
+  - image_templates:
+      - "ghcr.io/xenos76/{{ .ProjectName }}:{{ .Tag }}-amd64"
+    use: buildx
+    skip_push: false
+    build_flag_templates:
+      - "--pull"
+      - "--platform=linux/amd64"
+      - --label=org.opencontainers.image.title={{ .ProjectName }}
+      - --label=org.opencontainers.image.description={{ .ProjectName }}
+      - --label=org.opencontainers.image.url=https://github.com/xenOs76/{{ .ProjectName }}
+      - --label=org.opencontainers.image.source=https://github.com/xenOs76/{{ .ProjectName }}
+      - --label=org.opencontainers.image.version={{ .Version }}
+      - --label=org.opencontainers.image.created={{ .Date }}
+      - --label=org.opencontainers.image.revision={{ .FullCommit }}
+      - --label=org.opencontainers.image.licenses=MIT
+    goarch: amd64
+    dockerfile: "../Dockerfile.goreleaser"
+  - image_templates:
+      - "ghcr.io/xenos76/{{ .ProjectName }}:{{ .Tag }}-arm64"
+    use: buildx
+    skip_push: false
+    build_flag_templates:
+      - "--pull"
+      - "--platform=linux/arm64"
+      - --label=org.opencontainers.image.title={{ .ProjectName }}
+      - --label=org.opencontainers.image.description={{ .ProjectName }}
+      - --label=org.opencontainers.image.url=https://github.com/xenOs76/{{ .ProjectName }}
+      - --label=org.opencontainers.image.source=https://github.com/xenOs76/{{ .ProjectName }}
+      - --label=org.opencontainers.image.version={{ .Version }}
+      - --label=org.opencontainers.image.created={{ .Date }}
+      - --label=org.opencontainers.image.revision={{ .FullCommit }}
+      - --label=org.opencontainers.image.licenses=MIT
+    goarch: arm64
+    dockerfile: "../Dockerfile.goreleaser"
+docker_manifests:
+  - name_template: "ghcr.io/xenos76/{{ .ProjectName }}:{{ .Tag }}"
+    image_templates:
+      - "ghcr.io/xenos76/{{ .ProjectName }}:{{ .Tag }}-amd64"
+      - "ghcr.io/xenos76/{{ .ProjectName }}:{{ .Tag }}-arm64"
+  - name_template: "ghcr.io/xenos76/{{ .ProjectName }}:latest"
+    image_templates:
+      - "ghcr.io/xenos76/{{ .ProjectName }}:{{ .Tag }}-amd64"
+      - "ghcr.io/xenos76/{{ .ProjectName }}:{{ .Tag }}-arm64"
+changelog:
+  sort: asc
+  filters:
+    exclude:
+      - "^docs:"
+      - "^test:"