release.yml

name: Release

on:
  push:
    tags:
    - "v*"

permissions:
  contents: read
  id-token: write

jobs:

  lint:
    name: lint
    runs-on: ubuntu-24.04
    steps:

    - name: Checkout code
      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
      with:
        fetch-depth: 0

    - name: Lint
      run: |
        docker buildx bake lint

  unit-tests:
    name: unit-tests
    runs-on: ubuntu-24.04
    steps:

    - name: Checkout code
      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
      with:
        fetch-depth: 0

    - name: Unit tests
      run: |
        docker buildx bake test

  cli-test:
    name: cli-test
    runs-on: ubuntu-24.04
    steps:

    - name: Checkout code
      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
      with:
        fetch-depth: 0

    - name: Run CLI tests
      run: |
        docker buildx bake cli-test

  release:
    name: Release
    needs:
    - lint
    - unit-tests
    - cli-test
    runs-on: ubuntu-24.04
    steps:

    - name: Checkout code
      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
      with:
        fetch-depth: 0

    - name: Build and release binaries
      env:
        GITHUB_TOKEN: ${{ secrets.BOT_GITHUB_TOKEN }}
      run: |
        echo "Creating release for tag ${GITHUB_REF_NAME}"
        docker buildx build \
            --target publish \
            --build-arg GITHUB_TOKEN \
            --build-arg ACTIONS_ID_TOKEN_REQUEST_URL \
            --build-arg ACTIONS_ID_TOKEN_REQUEST_TOKEN \
            --build-arg GITHUB_REF_NAME \
            .