go.yaml

name: Go Salsa Action
on: [ push ]

env:
  IMAGE: ttl.sh/salsa/gotestapp
  CONTEXT: ci/golang
  KEY: ci/cosign.key

jobs:
  build-go:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3

      - name: Build and push
        id: docker_build
        uses: docker/build-push-action@v4
        with:
          push: true
          tags: ${{ env.IMAGE }}:1h
          context: ./${{ env.CONTEXT }}

      - name: Install Go
        uses: actions/setup-go@v4
        with:
          go-version-file: ${{ env.CONTEXT }}/go.mod
          cache-dependency-path: ${{ env.CONTEXT }}/go.sum
          cache: true

      - name: Generate, sign and upload SBOM
        uses: ./
        with:
          image: ${{ env.IMAGE }}@${{ steps.docker_build.outputs.digest }}
          build-context: ${{ env.CONTEXT }}
          key: ${{ env.KEY }}