replace gocd pipeline with gha pipeline

Author: xmik

.github/workflows/pipeline.yml

@@ -0,0 +1,43 @@
+name: Release
+
+on:
+  push:
+    branches:
+      - '*'
+
+jobs:
+  verify_version:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - run: |
+          /bin/bash -c "./tasks verify_version"
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - run: |
+          sudo git clone https://github.com/bats-core/bats-core /opt/bats-core
+          sudo git clone https://github.com/bats-core/bats-assert /opt/bats-assert
+          sudo git clone https://github.com/bats-core/bats-support /opt/bats-support
+          /bin/bash -c "./tasks test"
+  release:
+    runs-on: ubuntu-latest
+    needs: [verify_version, test]
+    if: github.ref == 'refs/heads/main'
+    steps:
+      - uses: actions/checkout@v4
+      - run: |
+          /bin/bash -c "./tasks release"
+  publish:
+    runs-on: ubuntu-latest
+    needs: [release]
+    environment: test
+    if: github.ref == 'refs/heads/main'
+    steps:
+      - uses: actions/checkout@v4
+      - name: Publish
+        env:
+          GITHUB_TOKEN: ${{ secrets.MY_GITHUB_TOKEN }}
+        run: |
+          /bin/bash -c "./tasks publish"

pipeline.gocd.yaml

@@ -41,8 +41,6 @@ case "${command}" in
       ;;
   publish)
       # publish the just released version
-      GITHUB_TOKEN=$(vault read -field=token secret/gocd/github_releases)
-      export GITHUB_TOKEN
       VERSION=$(releaser::get_last_git_tagged_version)
       releaser::prepare_github_release_bin
       $GHRELEASE_BIN release \
@@ -58,12 +56,6 @@ case "${command}" in
         --name "docker-ops" \
         --file src/docker-ops
       ;;
-  generate_vault_token)
-      vault_token=$(vault token create -ttl=48h -policy=gocd -field token -metadata gocd_renew=true)
-      secured_token_gocd=$(secret_ops::encrypt_with_gocd_top "${vault_token}")
-      echo "Generated token: ${vault_token} and encrypted by GoCD server"
-      secret_ops::insert_vault_token_gocd_yaml "${secured_token_gocd}"
-      ;;
   *)
       echo "Invalid command: '${command}'"
       exit 1