Skip to content

chore: remove leapfrog scan since it is a duplicate of uds-scan #623

chore: remove leapfrog scan since it is a duplicate of uds-scan

chore: remove leapfrog scan since it is a duplicate of uds-scan #623

Workflow file for this run

name: Test Goreleaser Action
on:
push:
branches:
- main
pull_request:
branches:
- main
permissions:
contents: read
jobs:
test-goreleaser:
permissions:
contents: write # for goreleaser/goreleaser-action to create a GitHub release
runs-on: ubuntu-latest
steps:
- name: Harden Runner
uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
with:
disable-sudo: true
egress-policy: block
allowed-endpoints: >
api.github.com:443
github.com:443
objects.githubusercontent.com:443
proxy.golang.org:443
storage.googleapis.com:443
sum.golang.org:443
github.com:443
goreleaser.com:443
toolbox-data.anchore.io:443
- name: Checkout code
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
with:
fetch-depth: 0
ref: ${{ inputs.commit }}
- name: Set up Go
uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
with:
go-version-file: 'go.mod'
- name: Install syft
uses: anchore/sbom-action/download-syft@61119d458adab75f756bc0b9e4bde25725f86a7a # v0
with:
syft-version: v1.9.0
- name: Create temporary Git tag
run: |
git tag v0.0.0-temp-tag
- name: Run GoReleaser
id: run-goreleaser
uses: goreleaser/goreleaser-action@286f3b13b1b49da4ac219696163fb8c1c93e1200 # v6.0.0
with:
version: latest
args: release --skip publish
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Delete temporary Git tag
run: |
git tag -d v0.0.0-temp-tag