Merge tag 'v3.68.4' of https://github.com/trufflesecurity/trufflehog #59

	# This workflow will download the go dependencies for the project
	# then compress and release the resulting vendor tarball
	# see https://wiki.gentoo.org/wiki/Writing_go_Ebuilds

	name: Create Go Vendor Tarball
	env:
	TAR_REPRO_OPTS: '"--mtime=2023-01-01 00:00 UTC" --sort=name --owner=0 --group=0 --numeric-owner'
	TAR_NAME: ${{ github.event.repository.name }}-${{ github.ref_name }}-vendor.tar.xz
	CHECKOUT_DIR: ${{ github.event.repository.name }}-${{ github.ref_name }}

	on:
	push:
	tags:
	- '*'



	jobs:

	vendor-tarball:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v3
	with:
	path: ${{ env.CHECKOUT_DIR }}

	- name: Set up Go
	uses: actions/setup-go@v4
	with:
	go-version: 'stable'
	cache-dependency-path: ${{ env.CHECKOUT_DIR }}/go.sum


	- name: fetch deps
	run: go mod vendor
	working-directory: ${{ env.CHECKOUT_DIR }}

	- name: compress vendor
	run: >
	tar ${{ env.TAR_REPRO_OPTS }} -caf ${{ env.TAR_NAME }}
	${{ env.CHECKOUT_DIR }}/vendor

	- name: release
	uses: softprops/[email protected]
	with:
	files: ${{ env.TAR_NAME }}
	body: Go vendor tarball for Gentoo Linux overlay package
	generate_release_notes: false
	fail_on_unmatched_files: true

Provide feedback