From 36918d71cc72094ad0871c04d953e8abab5422f4 Mon Sep 17 00:00:00 2001
From: Ning Shang <syncom.dev@gmail.com>
Date: Sat, 17 Dec 2022 14:34:59 -0800
Subject: [PATCH] GHA: release canary builds (#14)

A canary build contains artifacts built from the HEAD of the default
branch (`main`).

Add a GitHub Actions workflow to release canary builds to GitHub
Releases.
---
 .github/workflows/canary.yml | 29 +++++++++++++++++++++++++++++
 README.md                    |  3 ++-
 2 files changed, 31 insertions(+), 1 deletion(-)
 create mode 100644 .github/workflows/canary.yml

diff --git a/.github/workflows/canary.yml b/.github/workflows/canary.yml
new file mode 100644
index 0000000..b369ee6
--- /dev/null
+++ b/.github/workflows/canary.yml
@@ -0,0 +1,29 @@
+name: "Reproducible (r10e) r10edocker binaries canary builds"
+on:
+  push:
+    branches:
+      - 'main'
+jobs:
+  release-r10e-binaries:
+    name: "Release r10e r10edocker"
+    runs-on: ubuntu-latest
+    steps:
+      - name: "Checkout code"
+        uses: actions/checkout@v3
+
+      - name: "Build r10e apps at HEAD of default branch"
+        run: |
+          set -euxo pipefail
+          cd ${{ github.workspace }}
+          make r10e-build
+
+      - name: "Release versioned"
+        # v1.11.1
+        uses: ncipollo/release-action@4c75f0f2e4ae5f3c807cf0904605408e319dcaac
+        with:
+          tag: "canary"
+          name: "Canary"
+          allowUpdates: true
+          generateReleaseNotes: false
+          artifacts: "r10e-build/*"
+          token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/README.md b/README.md
index 0246ea5..a0e83d2 100644
--- a/README.md
+++ b/README.md
@@ -48,7 +48,8 @@ If your Go application is not reproducible, make sure you
 ### install `r10edocker`
 
 ```bash
-go install github.com/syncom/r10edocker@latest
+# commit SHA for v0.2.1. Pin commit because it's less malleable than a tag
+go install github.com/syncom/r10edocker@b2456e371147ed61d8f6d29f31b96a7be55cc207
 ```
 
 ### Set up your Go project for reproducible Docker builds