mirror of
https://github.com/securego/gosec.git
synced 2024-12-25 20:15:54 +00:00
c5ea1b7bdd
Signed-off-by: Cosmin Cojocar <gcojocar@adobe.com>
36 lines
589 B
YAML
36 lines
589 B
YAML
---
|
|
project_name: gosec
|
|
|
|
release:
|
|
extra_files:
|
|
- glob: ./bom.json
|
|
github:
|
|
owner: securego
|
|
name: gosec
|
|
|
|
builds:
|
|
- main: ./cmd/gosec/
|
|
binary: gosec
|
|
goos:
|
|
- darwin
|
|
- linux
|
|
- windows
|
|
goarch:
|
|
- amd64
|
|
- arm64
|
|
- s390x
|
|
ldflags: -X main.Version={{.Version}} -X main.GitTag={{.Tag}} -X main.BuildDate={{.Date}}
|
|
env:
|
|
- CGO_ENABLED=0
|
|
|
|
signs:
|
|
- cmd: cosign
|
|
stdin: '{{ .Env.COSIGN_PASSWORD}}'
|
|
args:
|
|
- "sign-blob"
|
|
- "--key=/tmp/cosign.key"
|
|
- "--output=${signature}"
|
|
- "${artifact}"
|
|
- "--yes"
|
|
artifacts: all
|
|
|