test(pkg/ci): fixup tests by ignoring WorkflowSha field #28

	name: releasing

	on:
	push:
	tags:
	- "v*"

	permissions:
	id-token: write
	contents: write

	jobs:
	goreleaser:
	runs-on: ubuntu-latest
	steps:
	- name: Check out the source code
	uses: actions/checkout@v4
	with:
	fetch-depth: 0 # Avoid running against a shallow clone

	- name: Force fetch upstream tags
	run: git fetch --force --tags

	- name: Set up Go 1.21
	uses: actions/setup-go@v4
	with:
	go-version: "1.21"
	check-latest: true

	- name: Install cosign
	uses: sigstore/[email protected]
	with:
	cosign-release: 'v2.2.3'

	- name: Install syft
	uses: anchore/sbom-action/[email protected]

	- name: Release
	uses: goreleaser/goreleaser-action@v4
	with:
	version: latest
	args: release --clean
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	COSIGN_EXPERIMENTAL: 1

Provide feedback