From 1e14c6b74c875d2bb8d967eef2ca022cf762fce5 Mon Sep 17 00:00:00 2001
From: peio <prpetit@gmail.com>
Date: Sun, 18 Jan 2026 17:23:51 +0000
Subject: [PATCH] add CI

---
 .gitea/workflows/release.yml | 55 ++++++++++++++++++++++++++++++++++++
 1 file changed, 55 insertions(+)
 create mode 100644 .gitea/workflows/release.yml

diff --git a/.gitea/workflows/release.yml b/.gitea/workflows/release.yml
new file mode 100644
index 0000000..649ec47
--- /dev/null
+++ b/.gitea/workflows/release.yml
@@ -0,0 +1,55 @@
+name: release
+
+on:
+  push:
+    tags:
+      - "v*"
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    strategy:
+      matrix:
+        arch: [amd64, arm64]
+
+    # Build in Alpine => musl toolchain
+    container:
+      image: golang:alpine
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Deps (musl toolchain)
+        run: |
+          apk add --no-cache git build-base musl-dev
+
+      - name: Go env
+        run: |
+          go version
+          go env
+
+      - name: Build (linux/musl)
+        env:
+          GOOS: linux
+          GOARCH: ${{ matrix.arch }}
+          CGO_ENABLED: "1"
+        run: |
+          mkdir -p dist
+          BIN="kc-policy-${GOOS}-${GOARCH}-musl"
+          go build -trimpath \
+            -ldflags="-s -w" \
+            -o "dist/${BIN}" ./cmd/kc-policy
+
+          tar -C dist -czf "dist/${BIN}.tar.gz" "${BIN}"
+          sha256sum "dist/${BIN}.tar.gz" > "dist/${BIN}.tar.gz.sha256"
+
+      - name: Upload assets to Gitea release
+        uses: actions/gitea-release-action@v1
+        with:
+          files: |
+            dist/*.tar.gz
+            dist/*.sha256
+        env:
+          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}