Release workflow (samber/mo)

The Release workflow from samber/mo, explained and optimized by Latchkey.

CI health: B - good

Point runs-on at Latchkey and get job timeouts, SHA-pinned actions, self-healing for flaky steps, and up to 58% lower cost, applied automatically.

Grade your own workflow free or run it on Latchkey →

Source: samber/mo.github/workflows/release.ymlLicense MITView source

What it does

This is the Release workflow from the samber/mo repository, a real project running GitHub Actions. It is shown here with attribution under its MIT license.

Below, Latchkey shows a faster, safer version produced by its optimization engine.

The workflow

workflow (.yml)

name: Release

on:
  workflow_dispatch:
    inputs:
      semver:
        type: string
        description: 'Semver (eg: v1.2.3)'
        required: true

jobs:
  release:
    if: github.triggering_actor == 'samber'
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
    - uses: actions/checkout@v7

    - name: Set up Go
      uses: actions/setup-go@v6
      with:
        go-version-file: 'go.mod'
        stable: false

    - name: Test
      run: make test

    # remove tests to clean dependencies
    - name: Remove xxx_test.go files
      run: rm -rf $(find . -type f -name "*_test.go" ! -name "*_example_test.go")

    - name: Cleanup dependencies
      run: go mod tidy

    - name: List files
      run: tree -Cfi
    - name: Write new go.mod into logs
      run: cat go.mod
    - name: Write new go.sum into logs
      run: cat go.sum

    - name: Create tag
      run: |
          git config --global user.name '${{ github.triggering_actor }}'
          git config --global user.email "${{ github.triggering_actor}}@users.noreply.github.com"

          git add .
          git commit --allow-empty -m 'bump ${{ inputs.semver }}'
          git tag ${{ inputs.semver }}
          git push origin ${{ inputs.semver }}

    - name: Release
      uses: softprops/action-gh-release@v3
      with:
        name: ${{ inputs.semver }}
        tag_name: ${{ inputs.semver }}

The same workflow, on Latchkey

Removes redundant runs and caps runaway jobs. Added and changed lines are highlighted.

name: Release
 
on:
  workflow_dispatch:
    inputs:
      semver:
        type: string
        description: 'Semver (eg: v1.2.3)'
        required: true
 
jobs:
  release:
    timeout-minutes: 30
    if: github.triggering_actor == 'samber'
    runs-on: latchkey-small
    permissions:
      contents: write
    steps:
    - uses: actions/checkout@v7
 
    - name: Set up Go
      uses: actions/setup-go@v6
      with:
        go-version-file: 'go.mod'
        stable: false
 
    - name: Test
      run: make test
 
    # remove tests to clean dependencies
    - name: Remove xxx_test.go files
      run: rm -rf $(find . -type f -name "*_test.go" ! -name "*_example_test.go")
 
    - name: Cleanup dependencies
      run: go mod tidy
 
    - name: List files
      run: tree -Cfi
    - name: Write new go.mod into logs
      run: cat go.mod
    - name: Write new go.sum into logs
      run: cat go.sum
 
    - name: Create tag
      run: |
          git config --global user.name '${{ github.triggering_actor }}'
          git config --global user.email "${{ github.triggering_actor}}@users.noreply.github.com"
 
          git add .
          git commit --allow-empty -m 'bump ${{ inputs.semver }}'
          git tag ${{ inputs.semver }}
          git push origin ${{ inputs.semver }}
 
    - name: Release
      uses: softprops/action-gh-release@v3
      with:
        name: ${{ inputs.semver }}
        tag_name: ${{ inputs.semver }}

What changed

Run on Latchkey managed runners with one line (runs-on), which apply the fixes below automatically and self-heal transient failures. This example uses latchkey-small; pick the runner size that fits the job.
Add a job timeout so a hung step cannot burn hours of runner time.

1 third-party action is referenced by a movable tag. Pin it to the commit SHA (Latchkey resolves and applies this automatically) so a repointed tag cannot change what runs.

This workflow runs 1 job per trigger. On Latchkey the same minutes cost up to 58% less than GitHub-hosted, with zero queue time.

Actions used in this workflow

actions/checkout actions/setup-go softprops/action-gh-release