gosec/.goreleaser.yml
Cosmin Cojocar c5ea1b7bdd
Update cosign to latest version in release Github action (#958)
Signed-off-by: Cosmin Cojocar <gcojocar@adobe.com>
2023-05-17 15:27:49 +02:00

36 lines
589 B
YAML

---
project_name: gosec
release:
extra_files:
- glob: ./bom.json
github:
owner: securego
name: gosec
builds:
- main: ./cmd/gosec/
binary: gosec
goos:
- darwin
- linux
- windows
goarch:
- amd64
- arm64
- s390x
ldflags: -X main.Version={{.Version}} -X main.GitTag={{.Tag}} -X main.BuildDate={{.Date}}
env:
- CGO_ENABLED=0
signs:
- cmd: cosign
stdin: '{{ .Env.COSIGN_PASSWORD}}'
args:
- "sign-blob"
- "--key=/tmp/cosign.key"
- "--output=${signature}"
- "${artifact}"
- "--yes"
artifacts: all