build.yml

name: Build and upload binaries
on:
  release:
    types: [published]
  push:
  pull_request:
permissions:
  contents: read
jobs:
  build:
    name: Build binaries
    runs-on: ubuntu-latest
    environment: "Build, sign, release binaries"
    strategy:
      matrix:
        include:
          - {GOOS: linux, GOARCH: amd64}
          - {GOOS: linux, GOARCH: arm, GOARM: 6}
          - {GOOS: linux, GOARCH: arm64}
    steps:
      - name: Install Go
        uses: actions/setup-go@v2
        with:
          go-version: 1.x
      - name: Checkout repository
        uses: actions/checkout@v2
        with:
          fetch-depth: 0
      - name: Build binary
        run: |
          cp LICENSE "$RUNNER_TEMP/LICENSE"
          echo -e "\n---\n" >> "$RUNNER_TEMP/LICENSE"
          curl -L "https://go.dev/LICENSE?m=text" >> "$RUNNER_TEMP/LICENSE"
          VERSION="$(git describe --tags 2> /dev/null || echo "WIP")"
          DIR="$(mktemp -d)"
          mkdir "$DIR/ssh-tpm-agent"
          cp "$RUNNER_TEMP/LICENSE" "$DIR/ssh-tpm-agent"
          go build -o "$DIR/ssh-tpm-agent" -ldflags "-X main.Version=$VERSION" -trimpath ./cmd/...
          tar -cvzf "ssh-tpm-agent-$VERSION-$GOOS-$GOARCH.tar.gz" -C "$DIR" ssh-tpm-agent
        env:
          CGO_ENABLED: 0
          GOOS: ${{ matrix.GOOS }}
          GOARCH: ${{ matrix.GOARCH }}
          GOARM: ${{ matrix.GOARM }}
      - name: Upload workflow artifacts
        uses: actions/upload-artifact@v2
        with:
          name: ssh-tpm-agent-binaries
          path: ssh-tpm-agent-*
  upload:
    name: Upload release binaries
    if: github.event_name == 'release'
    needs: build
    permissions:
      contents: write
    runs-on: ubuntu-latest
    steps:
      - name: Download workflow artifacts
        uses: actions/download-artifact@v2
        with:
          name: ssh-tpm-agent-binaries
      - name: Upload release artifacts
        run: gh release upload "$GITHUB_REF_NAME" ssh-tpm-agent-*
        env:
          GH_REPO: ${{ github.repository }}
          GH_TOKEN: ${{ github.token }}