build: update actions (#454)

* build: update actions

* .sarif

* rm snyk action

.github/workflows/docs.yml

@@ -1,58 +0,0 @@
-name: Documentation
-
-on:
-  # trigger deployment on every push to main branch
-  push:
-    branches:
-      - main
-  # trigger deployment manually
-  workflow_dispatch:
-
-jobs:
-  docs:
-    runs-on: ubuntu-latest
-
-    steps:
-      - uses: actions/checkout@v2.3.4
-        with:
-          # fetch all commits to get last updated time or other git log info
-          fetch-depth: 0
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v1
-        with:
-          # choose node.js version to use
-          node-version: '14'
-
-      # cache node_modules
-      - name: Cache dependencies
-        uses: actions/cache@v2
-        id: yarn-cache
-        with:
-          path: |
-            **/node_modules
-          key: ${{ runner.os }}-yarn-${{ hashFiles('**/yarn.lock') }}
-          restore-keys: |
-            ${{ runner.os }}-yarn-
-
-      # install dependencies if the cache did not hit
-      - name: Install dependencies
-        if: steps.yarn-cache.outputs.cache-hit != 'true'
-        run: yarn --frozen-lockfile
-
-      # run build script
-      - name: Build VuePress site
-        run: yarn docs:build
-
-      # please check out the docs of the workflow for more details
-      # @see https://github.com/crazy-max/ghaction-github-pages
-      - name: Deploy to GitHub Pages
-        uses: crazy-max/ghaction-github-pages@v2
-        with:
-          # deploy to gh-pages branch
-          target_branch: gh-pages
-          # deploy the default output dir of VuePress
-          build_dir: docs/.vuepress/dist
-        env:
-          # @see https://docs.github.com/en/actions/reference/authentication-in-a-workflow#about-the-github_token-secret
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/goreleaser.yml

@@ -1,26 +1,27 @@
-name: Release
-# This workflow helps with creating releases.
-# This job will only be triggered when a tag (vX.X.x) is pushed
+name: goreleaser
+
 on:
   push:
-    # Sequence of patterns matched against refs/tags
     tags:
-      - "v[0-9]+.[0-9]+.[0-9]+" # Push events to matching v*, i.e. v1.0, v20.15.10
-
+      - "v*.*.*"
 jobs:
-  release:
+  goreleaser:
     runs-on: ubuntu-latest
+    environment: release
     steps:
       - uses: actions/checkout@v2
-      - name: Install Go
-        uses: actions/setup-go@v2.1.3
         with:
-          go-version: 1.16
-      - name: Unshallow
-        run: git fetch --prune --unshallow
-      - name: Create release
-        uses: goreleaser/goreleaser-action@v2.7.0
+          submodules: true
+      - name: Set up Go
+        uses: actions/setup-go@v2
         with:
-          args: release --rm-dist --release-notes ./RELEASE_CHANGELOG.md
+          go-version: 1.16.4
+      - name: release dry run
+        run: make release-dry-run
+      - name: setup release environment
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |-
+          echo 'GITHUB_TOKEN=${{secrets.GITHUB_TOKEN}}' > .release-env
+      - name: release publish
+        run: make release