Merge pull request #1741 from kranurag7/kr/update-systemd-release-wor…

…kflow fix systemd release workflow on main
kubearmor · Apr 27, 2024 · d0f8a80 · d0f8a80
2 parents 82a4a0c + b083cbb
commit d0f8a80
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 6 deletions.
diff --git a/.github/workflows/ci-systemd-release.yml b/.github/workflows/ci-systemd-release.yml
@@ -6,7 +6,9 @@ on:
       - "*"
 
 # Declare default permissions as read only.
-permissions: read-all
+permissions:
+  id-token: write # requires for cosign keyless signing
+  contents: write # requires for goreleaser to write to GitHub release
 
 jobs:
   goreleaser:
@@ -41,11 +43,11 @@ jobs:
         working-directory: KubeArmor/BPF
 
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v2
+        uses: goreleaser/goreleaser-action@v5
         with:
           distribution: goreleaser
           version: v1.25.0
-          args: release --rm-dist
+          args: release --clean
           workdir: KubeArmor
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/KubeArmor/.goreleaser.yaml b/KubeArmor/.goreleaser.yaml
@@ -11,8 +11,6 @@ builds:
 
 signs:
   - cmd: cosign
-    env:
-      - COSIGN_EXPERIMENTAL=1
     certificate: '${artifact}.cert'
     args:
       - sign-blob
@@ -95,4 +93,4 @@ nfpms:
           - llvm
           - kernel-devel
           - policycoreutils-devel
-          - setools-console
+          - setools-console