release.yml

# name: goreleaser

# on:
#   push:
#     tags:
#       - 'v*.*.*'

# jobs:
#   goreleaser:
#     runs-on: ubuntu-latest
#     permissions:
#       contents: write
#       id-token: write
#       packages: write
#     steps:
#       -
#         name: Login to GHCR
#         uses: docker/login-action@v2
#         with:
#           registry: ghcr.io
#           username: ${{ github.actor }}
#           password: ${{ secrets.GITHUB_TOKEN }}
#       -
#         name: Checkout
#         uses: actions/checkout@v4
#         with:
#           fetch-depth: 0
#       -
#         name: Set up Go
#         uses: actions/setup-go@v4
#         with:
#           go-version: "1.22"
#       -
#         name: install cosign
#         uses: sigstore/cosign-installer@main
#       -
#         uses: anchore/sbom-action/download-syft@v0.14.3
#       -
#         name: Run GoReleaser
#         uses: goreleaser/goreleaser-action@v5
#         with:
#           version: latest
#           args: release --clean
#         env:
#           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
#           COSIGN_EXPERIMENTAL: 1
#           GOVERSION: "1.22"