Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 8 additions & 5 deletions .github/workflows/release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -25,16 +25,19 @@ jobs:
- name: Build
env:
CGO_ENABLED: "0"
GOOS: linux
run: |
for arch in amd64 arm64; do
GOARCH="$arch" go build -trimpath -o "dist/tamis-linux-$arch" ./cmd/tamis
for os in linux darwin windows; do
ext=""
[ "$os" = windows ] && ext=".exe"
for arch in amd64 arm64; do
GOOS="$os" GOARCH="$arch" go build -trimpath -o "dist/tamis-$os-$arch$ext" ./cmd/tamis
done
done
# The action only runs a released binary attested by this workflow for the commit it was given.
- uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8 # v4.2.2
with:
subject-path: dist/tamis-linux-*
subject-path: dist/tamis-*
- name: Publish the release
env:
GH_TOKEN: ${{ github.token }}
run: gh release create "$GITHUB_REF_NAME" dist/tamis-linux-* --repo "$GITHUB_REPOSITORY" --verify-tag --generate-notes
run: gh release create "$GITHUB_REF_NAME" dist/tamis-* --repo "$GITHUB_REPOSITORY" --verify-tag --generate-notes
2 changes: 1 addition & 1 deletion docs/development.md
Original file line number Diff line number Diff line change
Expand Up @@ -50,7 +50,7 @@ To bump an agent CLI, update its tag and the sha256 of each architecture's asset

## Releases

A `vYYYY.MM.DD.N` tag such as `v2026.10.25.1` runs the `Release` workflow. It builds tamis for Linux on amd64 and arm64, attests both binaries and publishes them in a GitHub release.
A `vYYYY.MM.DD.N` tag such as `v2026.10.25.1` runs the `Release` workflow. It builds tamis for Linux, macOS and Windows on amd64 and arm64, attests the six binaries and publishes them in a GitHub release. The action runs the Linux ones, the others serve local runs.

When the action's pinned commit carries such a tag, the action downloads the binary for the runner and checks its attestation against that commit before running it. For any other commit, the action builds tamis from source.

Expand Down
Loading