chore: add env-var support for tf (#54) #27

	---
	name: release
	on:
	push:
	branches:
	- main

	permissions:
	contents: write
	id-token: write
	issues: read
	packages: write
	pull-requests: write
	statuses: write
	actions: read

	concurrency:
	group: ${{ github.workflow }}-${{ github.head_ref \|\| github.ref }}
	cancel-in-progress: false

	defaults:
	run:
	shell: bash

	jobs:
	bump_tag:
	name: bump tag
	runs-on: ubuntu-latest
	steps:
	- name: Determine next version
	id: semver
	uses: ietf-tools/semver-action@v1
	with:
	token: ${{ secrets.GITHUB_TOKEN }}
	branch: main
	patchAll: true

	- name: Push tag
	uses: mathieudutour/[email protected]
	with:
	github_token: ${{ secrets.GITHUB_TOKEN }}
	custom_tag: ${{ steps.semver.outputs.nextStrict }}

	goreleaser:
	runs-on: ubuntu-latest
	needs:
	- bump_tag
	steps:
	- uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
	with:
	# Allow goreleaser to access older tag information.
	fetch-depth: 0
	- uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
	with:
	go-version-file: "go.mod"
	cache: true
	- name: Import GPG key
	uses: crazy-max/ghaction-import-gpg@72b6676b71ab476b77e676928516f6982eef7a41 # v5.3.0
	id: import_gpg
	with:
	gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
	passphrase: ${{ secrets.PASSPHRASE }}
	- name: Run GoReleaser
	uses: goreleaser/goreleaser-action@3fa32b8bb5620a2c1afe798654bbad59f9da4906 # v4.4.0
	with:
	args: release --clean
	env:
	# GitHub sets the GITHUB_TOKEN secret automatically.
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	GPG_FINGERPRINT: ${{ steps.import_gpg.outputs.fingerprint }}

Provide feedback