set audience correctly, no https (#1313) #525


	name: Create Release

	on:
	push:
	tags:
	- 'v' # Push events to matching v, i.e. v1.0, v20.15.10

	jobs:
	cli:
	# Only release CLI for tagged releases
	if: startsWith(github.event.ref, 'refs/tags/v')

	name: Release the CLI
	runs-on: ubuntu-latest

	# https://docs.github.com/en/actions/reference/authentication-in-a-workflow
	permissions:
	id-token: write
	contents: write

	steps:
	- uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
	with:
	egress-policy: audit
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
	- uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v2.2.0
	with:
	go-version-file: 'go.mod'
	check-latest: true

	- uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 # v3.6.0

	- uses: goreleaser/goreleaser-action@286f3b13b1b49da4ac219696163fb8c1c93e1200 # v2.8.1
	with:
	install-only: true

	- name: Release
	run: make release
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Provide feedback