feat(ci): sign, push to fury.io

Signed-off-by: Carlos Alexandro Becker <[email protected]>

.github/workflows/build.yml

@@ -36,6 +36,7 @@ jobs:
           go mod tidy
           go test -v ./...
           go build -o tt .
+      - uses: sigstore/[email protected]
       -
         name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v2
@@ -46,8 +47,10 @@ jobs:
           args: release --rm-dist
         env:
           GITHUB_TOKEN: ${{ secrets.GH_PAT }}
+          FURY_TOKEN: ${{ secrets.FURY_TOKEN }}
           GORELEASER_KEY: ${{ secrets.GORELEASER_KEY }}
           TWITTER_CONSUMER_KEY: ${{ secrets.TWITTER_CONSUMER_KEY }}
           TWITTER_CONSUMER_SECRET: ${{ secrets.TWITTER_CONSUMER_SECRET }}
           TWITTER_ACCESS_TOKEN: ${{ secrets.TWITTER_ACCESS_TOKEN }}
           TWITTER_ACCESS_TOKEN_SECRET: ${{ secrets.TWITTER_ACCESS_TOKEN_SECRET }}
+          COSIGN_PWD: ${{ secrets.COSIGN_PWD }}

goreleaser.yml

@@ -10,3 +10,8 @@ includes:
       url: https://raw.githubusercontent.com/caarlos0/.goreleaserfiles/main/package_with_completions.yml
   - from_url:
       url: https://raw.githubusercontent.com/caarlos0/.goreleaserfiles/main/release.yml
+  - from_url:
+      url: https://raw.githubusercontent.com/caarlos0/goreleaserfiles/main/cosign_checksum.yml
+
+furies:
+- account: caarlos0