docs: cncf onboarding items (#312) #19

	name: Publish release

	on:
	push:
	tags:
	- v*

	permissions:
	contents: read

	jobs:
	release:
	runs-on: ubuntu-latest
	permissions:
	contents: write
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.3.1
	with:
	egress-policy: audit

	- uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
	with:
	fetch-depth: 0

	- uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
	with:
	go-version: "1.21"

	- uses: anchore/sbom-action/download-syft@78fc58e266e87a38d4194b2137a3d4e9bcaf7ca1 # v0.14.3

	- name: Run goreleaser
	uses: goreleaser/goreleaser-action@7ec5c2b0c6cdda6e8bbb49444bc797dd33d74dd8 # v5.0.0
	with:
	version: latest
	args: release --clean --config .goreleaser.yml
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	- name: Checkout copa-action repository
	uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
	with:
	repository: project-copacetic/copa-action
	ref: main

	- name: Set up Docker
	uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0

	- name: Build and push copa-action image with new version
	run: \|
	tag="$(echo "${{ github.ref }}" \| tr -d 'refs/tags/v')"
	docker buildx build --build-arg copa_version=${tag} -t ghcr.io/project-copacetic/copa-action:v"$tag" --push .

Provide feedback