Add oidc login support #510

	# .github/workflows/ci.yml
	name: ci

	on:
	push:
	tags:
	- '*'
	branches: [ main ]
	pull_request:
	branches: [ main ]

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: ${{ startsWith(github.ref, 'refs/pull/') }}

	jobs:
	build:
	uses: ./.github/workflows/build.yml
	lint:
	uses: ./.github/workflows/lint.yml
	codeql:
	uses: ./.github/workflows/codeql-analysis.yml
	test:
	uses: ./.github/workflows/test.yml
	goreleaser:
	if: startsWith(github.event.ref, 'refs/tags/')
	needs: [ build, lint, codeql, test ]
	runs-on: ubuntu-latest
	env:
	DOCKER_CLI_EXPERIMENTAL: "enabled"
	strategy:
	matrix:
	go-version: [ "1.22" ]
	steps:
	- name: Checkout
	uses: actions/checkout@v4
	with:
	fetch-depth: 0
	- name: Set up QEMU
	uses: docker/setup-qemu-action@v3
	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v3
	- name: Docker Login
	uses: docker/login-action@v3
	with:
	username: ${{ secrets.DOCKER_USERNAME }}
	password: ${{ secrets.DOCKER_PASSWORD }}
	- name: Login to GitHub Container Registry
	uses: docker/login-action@v3
	with:
	registry: ghcr.io
	username: ${{ github.repository_owner }}
	password: ${{ secrets.GITHUB_TOKEN }}
	- name: Set up Go
	uses: actions/setup-go@v5
	with:
	go-version: ${{ matrix.go-version }}
	- name: Download build artifacts
	uses: actions/download-artifact@v4
	with:
	name: build-artifacts
	- name: Run GoReleaser
	uses: goreleaser/goreleaser-action@v5
	with:
	version: latest
	args: release --clean
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Provide feedback