Support runner override, zsh autocomplete and build improvements (#6) #19

	name: release

	on:
	push:
	tags:
	- "v*"

	permissions: {}

	jobs:
	goreleaser:
	runs-on: ubuntu-latest

	permissions:
	contents: write # create GH releases
	id-token: write # ephemeral keys (a.k.a. "keyless") signing
	attestations: write # write GH attestations

	steps:
	- name: Checkout
	uses: actions/checkout@v4
	with:
	fetch-depth: 0

	- name: Set up Go
	uses: actions/setup-go@v5
	with:
	go-version: stable

	- uses: anchore/sbom-action/download-syft@v0.17.7
	- uses: sigstore/cosign-installer@v3.7.0

	- name: Run GoReleaser
	uses: goreleaser/goreleaser-action@v6
	with:
	distribution: goreleaser
	version: '~> v2'
	args: release --clean
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	- name: Attest release artefacts
	uses: actions/attest-build-provenance@v1
	with:
	subject-path: "dist/qubesome*"

Provide feedback