Merge pull request #20 from DevopsArtFactory/codex/goreleaser-homebrew-release

build: automate releases and homebrew tap updates with goreleaser

Author: YoungJinJung

.github/workflows/release.yml

@@ -3,7 +3,7 @@ name: Release
 on:
   push:
     tags:
-      - 'v*'
+      - "v*"
   workflow_dispatch:
 
 permissions:
@@ -14,39 +14,34 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - name: Checkout
+      - name: Checkout repository
         uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
 
       - name: Setup Go
         uses: actions/setup-go@v5
         with:
           go-version-file: go.mod
 
-      - name: Build release packages
+      - name: Run GoReleaser
+        uses: goreleaser/goreleaser-action@v6
+        with:
+          distribution: goreleaser
+          version: "~> v2"
+          args: release --clean
         env:
-          VERSION: ${{ github.ref_name }}
-          COMMIT: ${{ github.sha }}
-        run: |
-          set -euo pipefail
-          SHORT_COMMIT="$(echo "$COMMIT" | cut -c1-7)"
-          make package VERSION="$VERSION" COMMIT="$SHORT_COMMIT"
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          HOMEBREW_TAP_GITHUB_TOKEN: ${{ secrets.HOMEBREW_TAP_GITHUB_TOKEN }}
 
-      - name: Upload workflow artifact
+      - name: Upload workflow artifacts
         uses: actions/upload-artifact@v4
         with:
           name: ende-release-${{ github.ref_name }}
           path: |
-            dist/ende*
-            dist/packages/*
+            dist/ende-*
+            dist/*.tar.gz
+            dist/*.zip
+            dist/SHA256SUMS
+            dist/homebrew/ende.rb
           if-no-files-found: error
-
-      - name: Create GitHub Release and upload assets
-        uses: softprops/action-gh-release@v2
-        with:
-          tag_name: ${{ github.ref_name }}
-          generate_release_notes: true
-          files: |
-            dist/ende*
-            dist/packages/*.tar.gz
-            dist/packages/*.zip
-            dist/packages/SHA256SUMS

.goreleaser.yml

@@ -0,0 +1,69 @@
+version: 2
+
+project_name: ende
+
+before:
+  hooks:
+    - go test ./...
+
+builds:
+  - id: ende
+    main: ./cmd/ende
+    binary: ende
+    env:
+      - CGO_ENABLED=0
+    goos:
+      - darwin
+      - linux
+      - windows
+    goarch:
+      - amd64
+      - arm64
+    ldflags:
+      - -s -w -X main.version={{ .Version }} -X main.commit={{ .ShortCommit }} -X main.date={{ .Date }}
+
+archives:
+  - id: binaries
+    ids:
+      - ende
+    formats:
+      - binary
+    name_template: "{{ .ProjectName }}-{{ .Os }}-{{ .Arch }}"
+
+  - id: packages
+    ids:
+      - ende
+    name_template: "{{ .ProjectName }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}"
+    formats:
+      - tar.gz
+    format_overrides:
+      - goos: windows
+        formats:
+          - zip
+
+checksum:
+  name_template: "SHA256SUMS"
+
+release:
+  github:
+    owner: DevopsArtFactory
+    name: ende
+
+brews:
+  - ids:
+      - packages
+    name: ende
+    directory: "."
+    homepage: "https://github.com/DevopsArtFactory/ende"
+    description: "Secure CLI for DevOps teams to share secrets using public-key encryption and sender verification."
+    license: "MIT"
+    repository:
+      owner: DevopsArtFactory
+      name: homebrew-ende
+      branch: main
+      token: "{{ .Env.HOMEBREW_TAP_GITHUB_TOKEN }}"
+    commit_author:
+      name: github-actions[bot]
+      email: 41898282+github-actions[bot]@users.noreply.github.com
+    commit_msg_template: "Update Homebrew formula for {{ .ProjectName }} {{ .Tag }}"
+    download_strategy: CurlDownloadStrategy

README.md

@@ -23,6 +23,8 @@ brew tap DevopsArtFactory/ende https://github.com/DevopsArtFactory/homebrew-ende
 brew install ende
 ```
 
+The Homebrew tap formula is updated automatically from Git tags through GoReleaser.
+
 Upgrade:
 ```bash
 brew update
@@ -34,6 +36,14 @@ Verify:
 ende --version
 ```
 
+## Release Automation
+- Tagged releases use GoReleaser to build macOS, Linux, and Windows binaries.
+- GoReleaser publishes release archives and raw binaries to GitHub Releases.
+- GoReleaser updates the Homebrew tap repository at [DevopsArtFactory/homebrew-ende](https://github.com/DevopsArtFactory/homebrew-ende).
+
+Required GitHub Actions secret:
+- `HOMEBREW_TAP_GITHUB_TOKEN`: token with `contents: write` access to `DevopsArtFactory/homebrew-ende`
+
 ## Install from GitHub Release (Linux / Windows)
 Replace `vX.Y.Z` with the release tag.