go-build-and-release.yml

name: Go build placeholder

on:
  workflow_call:
    inputs:
      release_version:
        description: Condition based on release branch build
        required: false
        type: string

    secrets:
      token:
        description: 'Secret token from caller workflow to access private packages'
        required: true
      gpg_key:
        description: 'GPG Private Key'
        required: true
      gpg_pass:
        description: 'GPG Passphrase'
        required: true

jobs:
  run-goreleaser:
    runs-on: ubuntu-latest
    steps:
      - uses: keyfactor/checkout@v4
        with:
          # Allow goreleaser to access older tag information.
          fetch-depth: 0
      - uses: keyfactor/setup-go@v5.0.1
        with:
          go-version-file: 'go.mod'
          cache: true
      - name: get-is-release
        run: |
          if [[ ("${{ github.event_name }}" == "pull_request") && "${{ inputs.release_version }}" != "" ]]; then
            echo "GO_ARGS=release --clean" | tee -a "$GITHUB_ENV" 
            echo "VERSION=${{ inputs.release_version }}" | tee -a "$GITHUB_ENV"  | tee -a "$GITHUB_STEP_SUMMARY"
          else
            echo "GO_ARGS=build --snapshot" | tee -a "$GITHUB_ENV" 
            echo "VERSION=0.0.0" | tee -a "$GITHUB_ENV"  | tee -a "$GITHUB_STEP_SUMMARY"
          fi
      - name: Import GPG key
        uses: keyfactor/ghaction-import-gpg@v6.1.0
        id: import_gpg
        with:
          gpg_private_key: ${{ secrets.gpg_key }}
          passphrase: ${{ secrets.gpg_pass }}
      - name: Run GoReleaser
        uses: keyfactor/goreleaser-action@v6.0.0
        with:
          args: ${{ env.GO_ARGS }}
        env:
          # GitHub sets the GITHUB_TOKEN secret automatically.
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          PAT_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          GPG_FINGERPRINT: ${{ steps.import_gpg.outputs.fingerprint }}
          GPG_TTY: $(tty)
          Version: ${{ env.VERSION }}