alternative homebrew updater

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>

.github/workflows/release-homebrew.yaml

@@ -1,10 +1,8 @@
-name: "Release Homebrew"
+name: "Release Homebrew core formula"
 
 on:
   workflow_dispatch:
-  release:
-    types:
-      - released
+  workflow_call:
 
 jobs:
   homebrew:
@@ -16,33 +14,22 @@ jobs:
           # we need to be able to get the commit for a tag
           fetch-depth: 0
 
-      - name: Get release info
+      - name: Get current release info
         id: release_info
         run: |
           echo -n "tag_name=$(gh release view --json tagName --jq '.tagName')" | tee -a $GITHUB_OUTPUT
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Get commit info
-        id: git_info
-        run: |
-          git checkout ${{ steps.release_info.outputs.tag_name }}
-          echo -n "commit=$(git rev-parse HEAD)" | tee -a $GITHUB_OUTPUT
-
-      - name: Update Homebrew formula
-        uses: dawidd6/action-homebrew-bump-formula@baf2b60c51fc1f8453c884b0c61052668a71bd1d # v3.11.0
+      - name: Bump homebrew-core formula
+        uses: mislav/bump-homebrew-formula-action@b3327118b2153c82da63fd9cbf58942146ee99f0 #v3
+        # skip if this looks like a pre-release tag
+        if: !contains(inputs.tag_name, '-')
         with:
-          token: ${{ secrets.HOMEBREW_TOKEN }}
-          org: anchore
-          formula: syft
-          tag: ${{ steps.release_info.outputs.tag_name }}
-          revision: ${{ steps.git_info.outputs.commit }}
-
-      - uses: 8398a7/action-slack@28ba43ae48961b90635b50953d216767a6bea486 #v3.16.2
-        if: ${{ failure() }}
-        with:
-          status: ${{ job.status }}
-          fields: repo,workflow,action,eventName
-          text: "Post-release homebrew publish workflow has failed: https://github.com/anchore/syft/actions/workflows/release-homebrew.yaml"
+          formula-name: syft
+          # https://github.com/Homebrew/homebrew-core/blob/master/Formula/s/syft.rb
+          formula-path: Formula/s/syft.rb
+          tag-name: ${{ inputs.tag_name }}
+          push-to: anchore/homebrew-core
         env:
-          SLACK_WEBHOOK_URL: ${{ secrets.SLACK_TOOLBOX_WEBHOOK_URL }}
+          COMMITTER_TOKEN: ${{ secrets.HOMEBREW_TOKEN }}