gosec/.goreleaser.yml

---
project_name: gosec

release:
  extra_files:
    - glob: ./bom.json
  github:
    owner: securego
    name: gosec

builds:
  - main: ./cmd/gosec/
    binary: gosec
    goos:
      - darwin
      - linux
      - windows
    goarch:
      - amd64
      - arm64
    ldflags: -X main.Version={{.Version}} -X main.GitTag={{.Tag}} -X main.BuildDate={{.Date}}
    env:
      - CGO_ENABLED=0

signs:
- cmd: cosign
  stdin: '{{ .Env.COSIGN_PASSWORD}}'
  args: ["sign-blob", "--key=/tmp/cosign.key", "--output=${signature}", "${artifact}"]
  artifacts: all
Add install.sh script 2018-10-05 10:56:13 +01:00			`---`
			`project_name: gosec`

			`release:`
Generate SBOM (#655) * Generate SBOM * Update release.yml * Update .github/workflows/release.yml Co-authored-by: Matthieu MOREL <mmorel-35@users.noreply.github.com> * Publish bom.json * Ignore SBOMs generated during CI Co-authored-by: Matthieu MOREL <mmorel-35@users.noreply.github.com> 2021-06-21 09:50:44 +01:00			`extra_files:`
			`- glob: ./bom.json`
Add install.sh script 2018-10-05 10:56:13 +01:00			`github:`
			`owner: securego`
			`name: gosec`

Use the goreleaser tool to perform releases 2018-07-27 13:41:45 +01:00			`builds:`
Extend the release action to sign the docker image and binary files with cosign (#781) * Extend the release action to sign the docker image and binary files with cosign * Fix lint warnings * Fix the ling warnings * Fix the lint warnings 2022-02-22 20:33:42 +00:00			`- main: ./cmd/gosec/`
Use the goreleaser tool to perform releases 2018-07-27 13:41:45 +01:00			`binary: gosec`
			`goos:`
			`- darwin`
			`- linux`
			`- windows`
			`goarch:`
			`- amd64`
Add arm64 support (#618) 2021-05-18 21:48:59 +01:00			`- arm64`
Use the goreleaser tool to perform releases 2018-07-27 13:41:45 +01:00			`ldflags: -X main.Version={{.Version}} -X main.GitTag={{.Tag}} -X main.BuildDate={{.Date}}`
			`env:`
			`- CGO_ENABLED=0`
Extend the release action to sign the docker image and binary files with cosign (#781) * Extend the release action to sign the docker image and binary files with cosign * Fix lint warnings * Fix the ling warnings * Fix the lint warnings 2022-02-22 20:33:42 +00:00
			`signs:`
			`- cmd: cosign`
			`stdin: '{{ .Env.COSIGN_PASSWORD}}'`
			`args: ["sign-blob", "--key=/tmp/cosign.key", "--output=${signature}", "${artifact}"]`
			`artifacts: all`