gosec/.goreleaser.yml

---
version: 2
project_name: gosec

release:
  extra_files:
    - glob: ./bom.json
  github:
    owner: securego
    name: gosec

builds:
  - main: ./cmd/gosec/
    binary: gosec
    goos:
      - darwin
      - linux
      - windows
    goarch:
      - amd64
      - arm64
      - s390x
      - ppc64le
    ldflags: -X main.Version={{.Version}} -X main.GitTag={{.Tag}} -X main.BuildDate={{.Date}}
    env:
      - CGO_ENABLED=0

signs:
- cmd: cosign
  stdin: '{{ .Env.COSIGN_PASSWORD}}'
  args:
  - "sign-blob"
  - "--key=/tmp/cosign.key"
  - "--output=${signature}"
  - "${artifact}"
  - "--yes"
  artifacts: all
Add install.sh script 2018-10-05 10:56:13 +01:00			`---`
Add the version into goreleaser config Change-Id: Id759cc78f3c8f3c69864311e91dd64cbacb1b958 Signed-off-by: Cosmin Cojocar <ccojocar@google.com> 2024-09-26 13:00:28 +01:00			`version: 2`
Add install.sh script 2018-10-05 10:56:13 +01:00			`project_name: gosec`

			`release:`
Generate SBOM (#655) * Generate SBOM * Update release.yml * Update .github/workflows/release.yml Co-authored-by: Matthieu MOREL <mmorel-35@users.noreply.github.com> * Publish bom.json * Ignore SBOMs generated during CI Co-authored-by: Matthieu MOREL <mmorel-35@users.noreply.github.com> 2021-06-21 09:50:44 +01:00			`extra_files:`
			`- glob: ./bom.json`
Add install.sh script 2018-10-05 10:56:13 +01:00			`github:`
			`owner: securego`
			`name: gosec`

Use the goreleaser tool to perform releases 2018-07-27 13:41:45 +01:00			`builds:`
Extend the release action to sign the docker image and binary files with cosign (#781) * Extend the release action to sign the docker image and binary files with cosign * Fix lint warnings * Fix the ling warnings * Fix the lint warnings 2022-02-22 20:33:42 +00:00			`- main: ./cmd/gosec/`
Use the goreleaser tool to perform releases 2018-07-27 13:41:45 +01:00			`binary: gosec`
			`goos:`
			`- darwin`
			`- linux`
			`- windows`
			`goarch:`
			`- amd64`
Add arm64 support (#618) 2021-05-18 21:48:59 +01:00			`- arm64`
Adding s390x support (#902) - Updated .goreleaser.yaml to support Linux on IBM Z ( s390x ) Signed-off-by: Dave Hay <david_hay@uk.ibm.com> Signed-off-by: Dave Hay <david_hay@uk.ibm.com> 2022-12-12 07:47:25 +00:00			`- s390x`
Added ppc64le support 2023-11-16 04:40:03 +00:00			`- ppc64le`
Use the goreleaser tool to perform releases 2018-07-27 13:41:45 +01:00			`ldflags: -X main.Version={{.Version}} -X main.GitTag={{.Tag}} -X main.BuildDate={{.Date}}`
			`env:`
			`- CGO_ENABLED=0`
Extend the release action to sign the docker image and binary files with cosign (#781) * Extend the release action to sign the docker image and binary files with cosign * Fix lint warnings * Fix the ling warnings * Fix the lint warnings 2022-02-22 20:33:42 +00:00
			`signs:`
			`- cmd: cosign`
			`stdin: '{{ .Env.COSIGN_PASSWORD}}'`
Update cosign to latest version in release Github action (#958) Signed-off-by: Cosmin Cojocar <gcojocar@adobe.com> 2023-05-17 14:27:49 +01:00			`args:`
			`- "sign-blob"`
			`- "--key=/tmp/cosign.key"`
			`- "--output=${signature}"`
			`- "${artifact}"`
			`- "--yes"`
Extend the release action to sign the docker image and binary files with cosign (#781) * Extend the release action to sign the docker image and binary files with cosign * Fix lint warnings * Fix the ling warnings * Fix the lint warnings 2022-02-22 20:33:42 +00:00			`artifacts: all`