release.yml

name: Build Changelog and Github Release

on:
  push:
    tags:
      - v*

jobs:
  releaser:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3.5.0
        with:
          fetch-depth: 0

      - name: setup go
        uses: actions/setup-go@v4
        with:
          go-version: '1.20.x'
          cache: true

      - name: Build binary
        run: |
          make build

      - name: Build docker image
        run: |
          make image VERSION=${{  github.ref_name }}

      - name: Scan The Image
        run: |
          REPO=policy-agent
          VERSION=${{  github.ref_name }}

          echo scanning ${REPO}:${VERSION}
          curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sudo sh -s -- -b /usr/local/bin
          grype "${REPO}:${VERSION}" --scope all-layers > /tmp/report.txt #--fail-on high to fail on sev high

      - name: Login to Docker Hub
        uses: docker/login-action@v1
        with:
          registry: docker.io
          username: ${{ secrets.DOCKER_USER }}
          password: ${{ secrets.DOCKER_PASSWORD }}

      - name: Release and push to Docker Registry
        run: |
          make push@weaveworks tag-file=new-tag version-file=new-version VERSION=${{  github.ref_name }}

      - name: Build Changelog
        id: github_release
        uses: mikepenz/release-changelog-builder-action@v2
        with:
          configuration: "${{ github.workspace }}/.github/workflows/changelog_configuration.json"
        env:
          GITHUB_TOKEN: ${{ secrets.BUILD_BOT_PERSONAL_ACCESS_TOKEN }}

      - name: Release
        uses: softprops/action-gh-release@v1
        with:
          body: ${{steps.github_release.outputs.changelog}}