action.yml

---
name: Bootstrap Checkout
description: Ensures all actions bootstrap the same

inputs:
  goreleaser:
    description: 'Install goreleaser toolchain ("true" or "false")'
    required: false
    default: "false"

runs:
  using: "composite"
  steps:

    - uses: actions/setup-go@v6
      with:
        go-version-file: 'go.mod'

    - uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3
      if: "${{ inputs.goreleaser == 'true' }}"
      with:
        platforms: linux/arm64, linux/amd64

    - name: Set up Docker Buildx
      if: "${{ inputs.goreleaser == 'true' }}"
      uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f

    # See https://goreleaser.com/blog/supply-chain-security/
    - name: installs syft for generating the SBOM with goreleaser
      if: "${{ inputs.goreleaser == 'true' }}"
      uses: anchore/sbom-action/download-syft@a930d0ac434e3182448fe678398ba5713717112a # v0.21.0