commit b0e64237bac20b72a9e32c9afa4cf16e5073b551
author Paul Wankadia <junyer@google.com> Mon Apr 08 22:28:14 2024 +0000
committer Paul Wankadia <junyer@google.com> Mon Apr 08 22:56:13 2024 +0000
tree 612558b48a8486c40e763572d092996b5ffa8bee
parent 4f6f815179266d3b6fd2b806f10471d5cc5f0efc

Add a GitHub Actions workflow for releases.

Triggering off a pushed tag, it creates the corresponding release, then
downloads the source code archives and uploads them as release assets
using Sigstore for signature. Someday, it will be convenient to switch
to using SLSA for signature and provenance, but that day is not today.

Yours truly has been wanting to automate away this dance for years. In
light of CVE-2024-3094, now seemed like a really good time to do that.

Change-Id: I0972ae5dcae7193ef457e23553a7dbe22adbfb1c
Reviewed-on: https://code-review.googlesource.com/c/re2/+/62970
Reviewed-by: Ash Liu <almquist@google.com>
Reviewed-by: Paul Wankadia <junyer@google.com>