feat: prepare release

.github/workflows/release.yml

@@ -0,0 +1,56 @@
+name: release
+on:
+  push:
+    branches:
+      - main
+    tags:
+      - "v*"
+
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: "0"
+          fetch-tags: "true"
+
+      - name: Setup Go
+        uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+          cache-dependency-path: go.sum
+          check-latest: true
+
+      - name: Init go
+        run: |
+          go mod download
+          go mod download -modfile tools/go.mod
+
+      - id: govulncheck
+        uses: golang/govulncheck-action@v1
+        with:
+          go-version-file: go.mod
+          go-package: ./...
+
+      - name: Snapshot release
+        uses: goreleaser/goreleaser-action@v6
+        if: ${{ !startsWith(github.ref, 'refs/tags/v') }}
+        with:
+          distribution: goreleaser
+          version: latest
+          args: release --clean --snapshot
+
+      - name: Release
+        uses: goreleaser/goreleaser-action@v6
+        if: ${{ startsWith(github.ref, 'refs/tags/v') }}
+        with:
+          distribution: goreleaser
+          version: latest
+          args: release --clean
+        env:
+          GITEA_TOKEN: ${{ secrets.RELEASE_TOKEN }}