feat: use gh tool to upload artifacts (#110)

Signed-off-by: PoAn Yang <[email protected]>

.github/workflows/release.yml

@@ -28,11 +28,11 @@ jobs:
           go-version: '1.22'
       - name: Import GPG key
         id: import_gpg
-        uses: crazy-max/ghaction-import-gpg@v5
-        with:
-          # These secrets will need to be configured for the repository:
-          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
-          passphrase: ${{ secrets.PASSPHRASE }}
+        run: |
+          echo "${{ secrets.GPG_PRIVATE_KEY }}" | gpg --batch --import
+          KEY_ID=$(gpg --list-keys --with-colons | grep pub | cut -d: -f5)
+          echo "${{ secrets.PASSPHRASE }}" | gpg --batch --yes --passphrase-fd 0 --pinentry-mode loopback --edit-key $KEY_ID trust quit
+          echo "fingerprint=$(gpg --list-keys --with-colons | grep fpr | head -n 1 | cut -d: -f10)" >> "$GITHUB_OUTPUT"
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v6
         with: