Example goreleaser + github actions config with keyless signing, SBOM generation, and attestations - View it on GitHub