example: upgrade github.com/aliyun/credentials-go #25

	name: Release

	on:
	push:
	tags:
	- 'v*'

	permissions:
	contents: write

	jobs:
	goreleaser:
	runs-on: ubuntu-latest
	permissions:
	id-token: write # This is required for requesting the JWT
	contents: write
	steps:
	- name: Checkout
	uses: actions/checkout@v4
	with:
	fetch-depth: 0
	- name: Set up Go
	uses: actions/setup-go@v4
	with:
	go-version: 1.19
	env:
	GOPATH: ${{ env.HOME }}
	- name: Run GoReleaser
	uses: goreleaser/goreleaser-action@v5
	with:
	# either 'goreleaser' (default) or 'goreleaser-pro'
	distribution: goreleaser
	version: latest
	args: release
	env:
	GOPATH: ${{ env.HOME }}
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	# Your GoReleaser Pro key, if you are using the 'goreleaser-pro' distribution
	# GORELEASER_KEY: ${{ secrets.GORELEASER_KEY }}

	- uses: 'mozillazg/alibabacloud-oidc-auth@v1'
	with:
	role-arn-to-assume: '${{ secrets.ALIBABA_CLOUD_RAM_ROLE_ARN }}'
	oidc-provider-arn: '${{ secrets.ALIBABA_CLOUD_RAM_OIDC_ARN }}'
	export-environment-variables: 'true'
	- run: \|
	set -e
	cd ci/ossutil && go build && \
	chmod +x ossutil && cp ossutil ../../cputil && cd ../../
	./cputil --endpoint=oss-cn-hangzhou.aliyuncs.com \
	--bucket '${{ secrets.OSS_BUCKET_NAME }}' \
	--objectdir '${{ secrets.OSS_OBJECT_DIR }}/${{ github.ref_name }}' \
	dist/ack-ram-tool*.tar.gz dist/checksums.txt

Provide feedback