.drone.yaml

---
kind: pipeline
name: secreter
steps:

- name: test
  image: l.gcr.io/google/bazel:1.0.0
  commands:
  - ./hack/build/test.sh
  volumes:
  - name: cache
    path: /root/.cache

- name: build and push docker image
  image: l.gcr.io/google/bazel:1.0.0
  environment:
    DOCKER_AUTH:
      from_secret: docker-config-json
  commands:
  - ./hack/build/push-image.sh
  volumes:
  - name: cache
    path: /root/.cache
  when:
    ref:
    - refs/heads/master
    - refs/tags/v*

- name: build binaries
  image: l.gcr.io/google/bazel:1.0.0
  commands:
  - ./hack/build/binaries.sh
  volumes:
  - name: cache
    path: /root/.cache
  when:
    ref:
    - refs/tags/v*

- name: release binaries
  image: plugins/github-release
  settings:
    api_key:
      from_secret: github-release-token
    files: bazel-bin/cmd/cli/*.tgz
    checksum:
    - sha512
  volumes:
  - name: cache
    path: /root/.cache
  when:
    ref:
    - refs/tags/v*

volumes:
- name: cache
  temp: {}
---
kind: signature
hmac: deaf1c78cc34e5479f2a1794a44325331a0aa7d71a72d23a94a8f18382c2896c

...