Merge pull request #1184 from sfc-gh-mhazy/apko-on-top-users #519


	name: Create Release

	on:
	push:
	tags:
	- 'v' # Push events to matching v, i.e. v1.0, v20.15.10

	env:
	GO_VERSION: '1.21'

	jobs:
	cli:
	# Only release CLI for tagged releases
	if: startsWith(github.event.ref, 'refs/tags/v')

	name: Release the CLI
	runs-on: ubuntu-latest

	# https://docs.github.com/en/actions/reference/authentication-in-a-workflow
	permissions:
	id-token: write
	contents: write

	steps:
	- uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
	with:
	egress-policy: audit
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
	- uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v2.2.0
	with:
	go-version-file: 'go.mod'

	- uses: sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # v3.5.0

	- uses: goreleaser/goreleaser-action@286f3b13b1b49da4ac219696163fb8c1c93e1200 # v2.8.1
	with:
	install-only: true

	- name: Release
	run: make release
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Provide feedback