From c27c2a26a96b0476c2776a4fb3f4db2e95904cc5 Mon Sep 17 00:00:00 2001
From: Antonio Navarro <antnavper@gmail.com>
Date: Thu, 23 May 2024 13:32:37 +0200
Subject: [PATCH] fix: refactor nightly workflow to use goreleaser pro

Signed-off-by: Antonio Navarro <antnavper@gmail.com>
---
 .github/goreleaser.yaml         |  4 +++
 .github/workflows/nightlies.yml | 63 +++++++++++++++------------------
 2 files changed, 33 insertions(+), 34 deletions(-)

diff --git a/.github/goreleaser.yaml b/.github/goreleaser.yaml
index bffbf9fb0d6..d82b31ea9fb 100644
--- a/.github/goreleaser.yaml
+++ b/.github/goreleaser.yaml
@@ -479,3 +479,7 @@ release:
 
     https://github.com/orgs/gnolang/packages?repo_name={{ .ProjectName }}
 
+nightly:
+  tag_name: nightly
+  publish_release: true
+  keep_single_release: true
\ No newline at end of file
diff --git a/.github/workflows/nightlies.yml b/.github/workflows/nightlies.yml
index b16c358522b..df3c8047b8d 100644
--- a/.github/workflows/nightlies.yml
+++ b/.github/workflows/nightlies.yml
@@ -5,46 +5,41 @@ on:
     - cron:  '0 0 * * 2-6'
   workflow_dispatch:
 
+permissions:
+  contents: write # needed to write releases
+  id-token: write # needed for keyless signing
+  packages: write # needed for ghcr access
+
 jobs:
-  trigger-nightly:
-    name: Push tag for nightly build
+  goreleaser:
     runs-on: ubuntu-latest
     steps:
-      - name: 'Checkout'
-        uses: actions/checkout@v4
+      - uses: actions/checkout@v4
         with:
-          token: ${{ secrets.GITHUB_TOKEN }}
           fetch-depth: 0
-      - name: 'Push new tag'
-        run: |
-          git config user.name "${GITHUB_ACTOR}"
-          git config user.email "${GITHUB_ACTOR}@users.noreply.github.com"
 
-          # A previous release was created using a lightweight tag
-          # git describe by default includes only annotated tags
-          # git describe --tags includes lightweight tags as well
-          DESCRIBE=`git tag -l --sort=-v:refname | grep -v nightly | head -n 1`
-          MAJOR_VERSION=`echo $DESCRIBE | awk '{split($0,a,"."); print a[1]}'`
-          MINOR_VERSION=`echo $DESCRIBE | awk '{split($0,a,"."); print a[2]}'`
-          MINOR_VERSION="$((${MINOR_VERSION} + 1))"
-          TAG="${MAJOR_VERSION}.${MINOR_VERSION}.0-nightly.$(date +'%Y%m%d')"
-          git tag -a $TAG -m "$TAG: nightly build"
-          git push origin $TAG
-      - name: 'Clean up nightly releases'
-        uses: dev-drprasad/delete-older-releases@v0.3.3
+      - uses: actions/setup-go@v5
+        with:
+          go-version: "1.22.x"
+          cache: true
+
+      - uses: sigstore/cosign-installer@v3.5.0
+      - uses: anchore/sbom-action/download-syft@v0.15.10
+
+      - uses: docker/login-action@v3
         with:
-          keep_latest: 5
-          delete_tags: true
-          delete_tag_pattern: nightly
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+        
+      - uses: goreleaser/goreleaser-action@v5
+        with:
+          distribution: goreleaser-pro
+          version: latest
+          args: release --clean --nightly --config ./.github/goreleaser.yaml
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - name: 'Delete nightly containers older than a week'
-        uses: snok/container-retention-policy@v2.1.2
-        with:
-          image-names: gnolang/gno*
-          cut-off: 1 week ago UTC
-          account-type: org
-          org-name: gnolang
-          keep-at-least: 5
-          token: ${{ secrets.GITHUB_TOKEN }}
-          filter-tags: '*-nightly*'
\ No newline at end of file
+          GORELEASER_KEY: ${{ secrets.GORELEASER_KEY }}