mirror of
https://github.com/FiloSottile/age.git
synced 2026-01-11 14:10:12 +00:00
50a600eef5
Remove the go-version-file test target, because it will just use the toolchain line. It's a bit unfortunate we lose coverage of a go.mod version that's older than oldstable, but that should not happen and it'd not be a supported Go version anyway.
119 lines
3.7 KiB
YAML
119 lines
3.7 KiB
YAML
name: Build and upload binaries
|
|
on:
|
|
release:
|
|
types: [published]
|
|
push:
|
|
pull_request:
|
|
permissions:
|
|
contents: read
|
|
jobs:
|
|
build:
|
|
name: Build binaries
|
|
runs-on: ubuntu-latest
|
|
strategy:
|
|
matrix:
|
|
include:
|
|
- {GOOS: linux, GOARCH: amd64}
|
|
- {GOOS: linux, GOARCH: arm, GOARM: 6}
|
|
- {GOOS: linux, GOARCH: arm64}
|
|
- {GOOS: darwin, GOARCH: arm64}
|
|
- {GOOS: windows, GOARCH: amd64}
|
|
- {GOOS: freebsd, GOARCH: amd64}
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v5
|
|
with:
|
|
fetch-depth: 0
|
|
persist-credentials: false
|
|
- name: Install Go
|
|
uses: actions/setup-go@v6
|
|
with:
|
|
go-version-file: go.mod
|
|
cache: false
|
|
- name: Build binary
|
|
run: |
|
|
VERSION="$(git describe --tags)"
|
|
DIR="$(mktemp -d)"
|
|
mkdir "$DIR/age"
|
|
go build -o "$DIR/age" -trimpath ./cmd/...
|
|
cp LICENSE "$DIR/age/LICENSE"
|
|
cat .github/workflows/LICENSE.suffix.txt >> "$DIR/age/LICENSE"
|
|
if [ "$GOOS" == "windows" ]; then
|
|
sudo apt-get update && sudo apt-get install -y osslsigncode
|
|
if [ -n "${{ secrets.SIGN_PASS }}" ]; then
|
|
for exe in "$DIR"/age/*.exe; do
|
|
/usr/bin/osslsigncode sign -t "http://timestamp.comodoca.com" \
|
|
-certs .github/workflows/certs/uitacllc.crt \
|
|
-key .github/workflows/certs/uitacllc.key \
|
|
-pass "${{ secrets.SIGN_PASS }}" \
|
|
-n age -in "$exe" -out "$exe.signed"
|
|
mv "$exe.signed" "$exe"
|
|
done
|
|
fi
|
|
( cd "$DIR"; zip age.zip -r age )
|
|
mv "$DIR/age.zip" "age-$VERSION-$GOOS-$GOARCH.zip"
|
|
else
|
|
tar -cvzf "age-$VERSION-$GOOS-$GOARCH.tar.gz" -C "$DIR" age
|
|
fi
|
|
env:
|
|
CGO_ENABLED: 0
|
|
GOOS: ${{ matrix.GOOS }}
|
|
GOARCH: ${{ matrix.GOARCH }}
|
|
GOARM: ${{ matrix.GOARM }}
|
|
- name: Upload workflow artifacts
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: age-artifacts-${{ matrix.GOOS }}-${{ matrix.GOARCH }}
|
|
path: age-*
|
|
source:
|
|
name: Package source code
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v5
|
|
with:
|
|
fetch-depth: 0
|
|
persist-credentials: false
|
|
- name: Install Go
|
|
uses: actions/setup-go@v6
|
|
with:
|
|
go-version-file: go.mod
|
|
cache: false
|
|
- name: Create source tarball
|
|
run: |
|
|
VERSION="$(git describe --tags)"
|
|
DIR="$(mktemp -d)"
|
|
mkdir "$DIR/age"
|
|
git archive --format=tar.gz HEAD | tar -xz -C "$DIR/age"
|
|
( cd "$DIR/age"; go mod vendor )
|
|
tar -cvzf "age-$VERSION-source.tar.gz" -C "$DIR" age
|
|
- name: Upload workflow artifacts
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: age-artifacts-source
|
|
path: age-*-source.tar.gz
|
|
upload:
|
|
name: Upload and attest release artifacts
|
|
if: github.event_name == 'release'
|
|
needs: [build, source]
|
|
permissions:
|
|
contents: write
|
|
attestations: write
|
|
id-token: write
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Download workflow artifacts
|
|
uses: actions/download-artifact@v4
|
|
with:
|
|
pattern: age-artifacts-*
|
|
merge-multiple: true
|
|
- name: Generate artifacts attestation
|
|
uses: actions/attest-build-provenance@v3
|
|
with:
|
|
subject-path: age-*
|
|
- name: Upload release artifacts
|
|
run: gh release upload "$GITHUB_REF_NAME" age-*
|
|
env:
|
|
GH_REPO: ${{ github.repository }}
|
|
GH_TOKEN: ${{ github.token }}
|