Update CHANGELOG

.github/workflows/ci.yaml

@@ -1,15 +1,16 @@
 name: ci
 
 on:
+  pull_request:
+    branches:
+      - master
+      - feature/*
+      - releases/*
   push:
     branches:
-      - 'master'
-      - 'releases/'
-    paths-ignore:
-      - '**.md'
-  pull_request:
-    paths-ignore:
-      - '**.md'
+      - master
+      - feature/*
+      - releases/*
 
 jobs:
   ci:
@@ -35,7 +36,7 @@ jobs:
         name: Set up Go
         uses: actions/setup-go@v2
         with:
-          go-version: 1.14
+          go-version: 1.13
       -
         name: Check
         uses: ./
@@ -48,43 +49,3 @@ jobs:
         with:
           version: ${{ matrix.version }}
           args: release --skip-publish --rm-dist
-
-  signing:
-    runs-on: ${{ matrix.os }}
-    strategy:
-      fail-fast: false
-      matrix:
-        os:
-          - ubuntu-latest
-          - macOS-latest
-          - windows-latest
-    steps:
-      -
-        name: Checkout
-        uses: actions/checkout@v2
-      -
-        name: Unshallow
-        run: git fetch --prune --unshallow
-      -
-        name: Set up Go
-        uses: actions/setup-go@v2
-        with:
-          go-version: 1.14
-      -
-        name: Import GPG key
-        uses: crazy-max/ghaction-import-gpg@v1
-        env:
-          GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY_TEST }}
-          PASSPHRASE: ${{ secrets.PASSPHRASE_TEST }}
-      -
-        name: Check
-        uses: ./
-        with:
-          version: latest
-          args: -f .goreleaser-signing.yml check --debug
-      -
-        name: GoReleaser
-        uses: ./
-        with:
-          version: latest
-          args: -f .goreleaser-signing.yml release --skip-publish --rm-dist

.github/workflows/test.yml

@@ -1,15 +1,16 @@
 name: test
 
 on:
+  pull_request:
+    branches:
+      - master
+      - feature/*
+      - releases/*
   push:
     branches:
-      - 'master'
-      - 'releases/*'
-    paths-ignore:
-      - '**.md'
-  pull_request:
-    paths-ignore:
-      - '**.md'
+      - master
+      - feature/*
+      - releases/*
 
 jobs:
   test:

.goreleaser-signing.yml

@@ -1,40 +0,0 @@
-env:
-  - GO111MODULE=on
-  - GOPROXY=https://goproxy.io
-
-before:
-  hooks:
-    - go mod download
-
-builds:
-  -
-    env:
-      - CGO_ENABLED=0
-    goos:
-      - darwin
-      - linux
-      - windows
-    goarch:
-      - 386
-      - amd64
-
-archives:
-  -
-    replacements:
-      386: i386
-      amd64: x86_64
-    format_overrides:
-      - goos: windows
-        format: zip
-    files:
-      - LICENSE
-      - README.md
-      - CHANGELOG.md
-
-checksum:
-  name_template: 'checksums.txt'
-
-signs:
-  -
-    artifacts: checksum
-    args: ["--batch", "-u", "27571A53B86AF0C799B38BA77D851EB72D73BDA0", "--output", "${signature}", "--detach-sign", "${artifact}"]

.goreleaser.yml

@@ -1,35 +0,0 @@
-env:
-  - GO111MODULE=on
-  - GOPROXY=https://goproxy.io
-
-before:
-  hooks:
-    - go mod download
-
-builds:
-  -
-    env:
-      - CGO_ENABLED=0
-    goos:
-      - darwin
-      - linux
-      - windows
-    goarch:
-      - 386
-      - amd64
-
-archives:
-  -
-    replacements:
-      386: i386
-      amd64: x86_64
-    format_overrides:
-      - goos: windows
-        format: zip
-    files:
-      - LICENSE
-      - README.md
-      - CHANGELOG.md
-
-checksum:
-  name_template: 'checksums.txt'

CHANGELOG.md

@@ -1,11 +1,8 @@
 # Changelog
 
-## 2.0.0 (2020/05/10)
+## 1.5.1 (2020/05/10)
 
-* Remove `key` input and use [Import GPG](https://github.com/crazy-max/ghaction-import-gpg) GitHub Action instead.
-* Make `args` input as required
-* Go 1.14
-* Update deps
+* Mark `key` input as deprecated
 
 ## 1.5.0 (2020/05/07)
 

README.md

@@ -11,24 +11,12 @@
   </p>
 </p>
 
-___
+---
 
 ![GoRelease Action](.github/goreleaser-action.png)
 
-* [Usage](#usage)
-  * [Workflow](#workflow)
-  * [Run on new tag](#run-on-new-tag)
-  * [Signing](#signing)
-* [Customizing](#customizing)
-  * [inputs](#inputs)
-  * [environment variables](#environment-variables)
-* [Limitation](#limitation)
-* [License](#license)
-
 ## Usage
 
-### Workflow
-
 ```yaml
 name: goreleaser
 
@@ -50,21 +38,20 @@ jobs:
         name: Set up Go
         uses: actions/setup-go@v2
         with:
-          go-version: 1.14
+          go-version: 1.13
       -
         name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v2
+        uses: goreleaser/goreleaser-action@v1
         with:
           version: latest
           args: release --rm-dist
+          key: ${{ secrets.YOUR_PRIVATE_KEY }}
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 ```
 
 > **IMPORTANT**: note the `Unshallow` step. It is required for the changelog to work correctly.
 
-### Run on new tag
-
 If you want to run GoReleaser only on new tag, you can use this event:
 
 ```yaml
@@ -79,46 +66,18 @@ Or with a condition on GoReleaser step:
 ```yaml
       -
         name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v2
+        uses: goreleaser/goreleaser-action@v1
         if: startsWith(github.ref, 'refs/tags/')
         with:
           version: latest
           args: release --rm-dist
+          key: ${{ secrets.YOUR_PRIVATE_KEY }}
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 ```
 
 > For detailed instructions please follow GitHub Actions [workflow syntax](https://help.github.com/en/articles/workflow-syntax-for-github-actions#About-yaml-syntax-for-workflows).
 
-### Signing
-
-If [signing is enabled](https://goreleaser.com/customization/#Signing) in your GoReleaser configuration, you can use the [Import GPG](https://github.com/crazy-max/ghaction-import-gpg) GitHub Action along with this one:
-
-```yaml
-      -
-        name: Import GPG key
-        uses: crazy-max/ghaction-import-gpg@v1
-        env:
-          GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
-          PASSPHRASE: ${{ secrets.PASSPHRASE }}
-      -
-        name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v2
-        with:
-          version: latest
-          args: release --rm-dist
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-```
-
-And reference the userID in your signing configuration:
-
-```yaml
-signs:
-  - artifacts: checksum
-    args: ["--batch", "-u", "<key id, fingerprint, email, ...>", "--output", "${signature}", "--detach-sign", "${artifact}"]
-```
-
 ## Customizing
 
 ### inputs
@@ -129,6 +88,7 @@ Following inputs can be used as `step.with` keys
 |---------------|---------|-----------|-------------------------------------------|
 | `version`     | String  | `latest`  | GoReleaser version. Example: `v0.117.0`   |
 | `args`        | String  |           | Arguments to pass to GoReleaser           |
+| `key`         | String  |           | Private key to import                     |
 | `workdir`     | String  | `.`       | Working directory (below repository root) |
 
 ### environment variables
@@ -151,14 +111,28 @@ secret named `GH_PAT`, the step will look like this:
 ```yaml
       -
         name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v2
+        uses: goreleaser/goreleaser-action@v1
         with:
           version: latest
           args: release --rm-dist
+          key: ${{ secrets.YOUR_PRIVATE_KEY }}
         env:
           GITHUB_TOKEN: ${{ secrets.GH_PAT }}
 ```
 
+## Signing
+
+If signing is enabled in your GoReleaser configuration, populate the `key` input with your private key
+and reference the key in your signing configuration, e.g.
+
+```yaml
+signs:
+  - artifacts: checksum
+    args: ["--batch", "-u", "<key id, fingerprint, email, ...>", "--output", "${signature}", "--detach-sign", "${artifact}"]
+```
+
+This feature is currently only compatible when using the default `gpg` command and a private key without a passphrase.
+
 ## License
 
 MIT. See `LICENSE` for more details.

action.yml

@@ -10,14 +10,14 @@ inputs:
   version:
     description: 'GoReleaser version. Example: v0.118.0'
     default: 'latest'
-    required: false
   args:
     description: 'Arguments to pass to GoReleaser'
-    required: true
+  key:
+    description: 'Deprecated. Use goreleaser/goreleaser-action@v2 alongside crazy-max/ghaction-import-gpg'
+    deprecationMessage: 'The key input will not be supported. Use goreleaser/goreleaser-action@v2 alongside crazy-max/ghaction-import-gpg'
   workdir:
     description: 'Working directory (below repository root)'
     default: '.'
-    required: false
 
 runs:
   using: 'node12'

dist/index.js

@@ -1281,11 +1281,13 @@ const git = __importStar(__webpack_require__(453));
 const installer = __importStar(__webpack_require__(749));
 const core = __importStar(__webpack_require__(470));
 const exec = __importStar(__webpack_require__(986));
+const fs = __importStar(__webpack_require__(747));
 function run() {
     return __awaiter(this, void 0, void 0, function* () {
         try {
             const version = core.getInput('version') || 'latest';
-            const args = core.getInput('args', { required: true });
+            const args = core.getInput('args');
+            const key = core.getInput('key');
             const workdir = core.getInput('workdir') || '.';
             const goreleaser = yield installer.getGoReleaser(version);
             const commit = yield git.getShortCommit();
@@ -1307,6 +1309,12 @@ function run() {
                     core.info(`✅ ${tag} tag found for commit ${commit}`);
                 }
             }
+            if (key) {
+                core.info('🔑 Importing signing key...');
+                let path = `${process.env.HOME}/key.asc`;
+                fs.writeFileSync(path, key, { mode: 0o600 });
+                yield exec.exec('gpg', ['--import', path]);
+            }
             core.info('🏃 Running GoReleaser...');
             yield exec.exec(`${goreleaser} ${args}${snapshot}`);
         }

go.mod

@@ -1,3 +1,3 @@
 module github.com/goreleaser/goreleaser-action
 
-go 1.14
+go 1.12

src/main.ts

@@ -2,11 +2,13 @@ import * as git from './git';
 import * as installer from './installer';
 import * as core from '@actions/core';
 import * as exec from '@actions/exec';
+import * as fs from 'fs';
 
 async function run(): Promise<void> {
   try {
     const version = core.getInput('version') || 'latest';
-    const args = core.getInput('args', {required: true});
+    const args = core.getInput('args');
+    const key = core.getInput('key');
     const workdir = core.getInput('workdir') || '.';
     const goreleaser = await installer.getGoReleaser(version);
 
@@ -31,6 +33,13 @@ async function run(): Promise<void> {
       }
     }
 
+    if (key) {
+      core.info('🔑 Importing signing key...');
+      let path = `${process.env.HOME}/key.asc`;
+      fs.writeFileSync(path, key, {mode: 0o600});
+      await exec.exec('gpg', ['--import', path]);
+    }
+
     core.info('🏃 Running GoReleaser...');
     await exec.exec(`${goreleaser} ${args}${snapshot}`);
   } catch (error) {