feat: add service account authirosation and replace swagger with sdk … #5

	name: Release

	on:
	push:
	tags:
	- "*"

	permissions: read-all

	jobs:
	release:
	permissions:
	id-token: write
	packages: write
	contents: write
	runs-on: ubuntu-latest
	env:
	REGISTRY: ghcr.io
	IMAGE_NAME: ${{ github.repository }}
	steps:
	- name: Checkout
	uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
	with:
	fetch-depth: 0
	- name: Git Fetch
	run: git fetch --force --tags
	- name: Setup go
	uses: actions/setup-go@v5
	with:
	go-version: stable
	- uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v4.0.1
	with:
	path: \|
	~/.cache/go-build
	~/go/pkg/mod
	key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
	restore-keys: \|
	${{ runner.os }}-go-
	- uses: sigstore/cosign-installer@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4 # v3.4.0
	- uses: anchore/sbom-action/download-syft@9fece9e20048ca9590af301449208b2b8861333b # v0.15.9

	- name: Set Up Docker Buildx
	uses: docker/setup-buildx-action@v3

	- name: Set up Cosign
	uses: sigstore/cosign-installer@v3.4.0

	- name: Login to Registry
	uses: docker/login-action@v3
	with:
	registry: ${{ env.REGISTRY }}
	username: ${{ github.actor }}
	password: ${{ secrets.GITHUB_TOKEN }}

	- name: Release with Goreleaser
	uses: goreleaser/goreleaser-action@v5
	with:
	distribution: goreleaser
	version: latest
	args: release --clean
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	COSIGN_PRIVATE_KEY: ${{secrets.COSIGN_PRIVATE_KEY}}
	COSIGN_PASSWORD: ${{secrets.COSIGN_KEY_PASSWORD}}

Provide feedback