troubleshoot/.github/workflows/release.yaml

name: release

on:
  push:
    tags:
      - 'v*'

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: false

jobs:
  goreleaser:
    runs-on: troubleshoot_release
    steps:
      - name: Checkout
        uses: actions/checkout@v7
        with:
          fetch-depth: 0

      - uses: azure/docker-login@v2
        with:
          username: ${{ secrets.DOCKERHUB_USER }}
          password: ${{ secrets.DOCKERHUB_PASSWORD }}

      - uses: actions/setup-go@v7
        with:
          go-version-file: 'go.mod'

      - name: Install Cosign
        uses: sigstore/cosign-installer@v4.1.2
        with:
          cosign-release: 'v3.1.3'

      - name: Generate and sign SBOM
        run: make sbom
        env:
          COSIGN_KEY: ${{ secrets.COSIGN_KEY }}
          COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}

      - name: Run GoReleaser
        uses: goreleaser/goreleaser-action@v7
        with:
          version: "v2.12.3"
          args: release --clean --config deploy/.goreleaser.yaml
        env:
          GITHUB_TOKEN: ${{ secrets.HOMEBREW_GITHUB_TOKEN }}

      - name: Update new preflight version in krew-index
        if: ${{ !contains(github.ref_name, '-') }}
        uses: rajatjindal/krew-release-bot@v0.0.51
        with:
          krew_template_file: deploy/krew/preflight.yaml

      - name: Update new support-bundle version in krew-index
        if: ${{ !contains(github.ref_name, '-') }}
        uses: rajatjindal/krew-release-bot@v0.0.51
        with:
          krew_template_file: deploy/krew/support-bundle.yaml

  notify:
    if: ${{ !contains(github.ref_name, '-') }}
    uses: replicatedhq/reusable-workflows/.github/workflows/notify-release.yml@0432fb838fc83852b78be97a150b35991a85d56f
    with:
      tag: ${{ github.ref_name }}
    secrets:
      slack_webhook: ${{ secrets.RELEASE_SLACK_WEBHOOK }}