Add more platforms, SBOMs and sign artifacts (#88) #66

	name: goreleaser

	on:
	pull_request:
	branches:
	- master
	push:
	branches:
	- master
	tags:
	- "*"

	concurrency:
	group: ${{ github.ref_name }}-goreleaser
	cancel-in-progress: true

	permissions:
	contents: read

	jobs:
	goreleaser:
	runs-on: ubuntu-latest
	permissions:
	contents: write
	id-token: write
	steps:
	- name: Checkout
	uses: actions/checkout@v4
	with:
	fetch-depth: 0

	- name: Set up Go
	uses: actions/setup-go@v5
	with:
	go-version: stable

	- name: Test
	run: go test ./...

	- name: Install Cosign
	uses: sigstore/cosign-installer@v3
	if: github.ref_type == 'tag'

	- name: Run GoReleaser
	uses: goreleaser/goreleaser-action@v6
	with:
	version: latest
	args: ${{ github.ref_type == 'tag' && 'release' \|\| 'build --snapshot' }} --clean
	env:
	GITHUB_TOKEN: ${{ secrets.GH_PAT }}

Provide feedback