Release #13

	# Terraform Provider release workflow.
	name: Release

	# This GitHub action creates a release when a tag that matches the pattern
	# "v*" (e.g. v0.1.0) is created.
	on:
	push:
	tags:
	- 'v*'

	# Releases need permissions to read and write the repository contents.
	# GitHub considers creating releases and uploading assets as writing contents.
	permissions:
	contents: write

	jobs:
	goreleaser:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	with:
	# Allow goreleaser to access older tag information.
	fetch-depth: 0
	- uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
	with:
	go-version-file: 'go.mod'
	cache: true
	- name: Import GPG key
	env:
	GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
	PASSPHRASE: ${{ secrets.PASSPHRASE }}
	run: \|
	gpg --batch --import --yes <<<"$GPG_PRIVATE_KEY"
	FINGERPRINT=$(gpg --with-colons --list-keys \| grep '^pub' \| cut -d: -f5 \| head -n 1)
	KEYGRIP=$(gpg --with-colons --with-keygrip --list-secret-keys \| grep '^grp' \| cut -d: -f10 \| head -n 1)
	echo "allow-preset-passphrase" >> ~/.gnupg/gpg-agent.conf
	gpg-connect-agent reloadagent /bye
	/usr/lib/gnupg/gpg-preset-passphrase --preset "$KEYGRIP" <<<"$PASSPHRASE"
	echo "GPG_FINGERPRINT=$FINGERPRINT" >> $GITHUB_ENV
	- name: Run GoReleaser
	uses: goreleaser/goreleaser-action@ec59f474b9834571250b370d4735c50f8e2d1e29 # v7.0.0
	with:
	args: release --clean
	env:
	# GitHub sets the GITHUB_TOKEN secret automatically.
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Provide feedback