test2 #5

	name: Publish release

	on:
	push:
	tags:
	- v*

	permissions:
	contents: read

	jobs:
	release:
	runs-on: ubuntu-latest
	permissions:
	contents: write
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.3.1
	with:
	egress-policy: audit

	- uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
	with:
	fetch-depth: 0

	- uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
	with:
	go-version: "1.21"

	- uses: anchore/sbom-action/download-syft@78fc58e266e87a38d4194b2137a3d4e9bcaf7ca1 # v0.14.3

	- name: Run goreleaser
	uses: goreleaser/goreleaser-action@3fa32b8bb5620a2c1afe798654bbad59f9da4906 # v4.4.0
	with:
	version: latest
	args: release --clean --config .goreleaser.yml
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	- name: Checkout copa-action repository
	uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
	with:
	repository: project-copacetic/copa-action
	ref: main

	- name: Set up Docker
	uses: docker/setup-buildx-action@4c0219f9ac95b02789c1075625400b2acbff50b1 # v2.9.1

	- name: Login to ghcr.io
	uses: docker/login-action@f4ef78c080cd8ba55a85445d5b36e214a81df20a # v2.2.0
	with:
	registry: ghcr.io
	username: ${{ github.actor }}
	password: ${{ secrets.GITHUB_TOKEN }}

	- name: Build and push copa-action image with new version
	run: \|
	tag="$(echo "${{ github.ref }}" \| tr -d 'refs/tags/v')"
	docker buildx build --build-arg copa_version=${tag} -t ghcr.io/ashnamehrotra/copa-action:v"$tag" --push .

Provide feedback