falcosidekick/.goreleaser.yml at master · falcosecurity/falcosidekick · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
version: 2

project_name: falcosidekick

env:
  - GO111MODULE=on
  - DOCKER_CLI_EXPERIMENTAL=enabled
  - DOCKER_BUILDKIT=1
  - BUILDX_PLATFORMS=linux/amd64,linux/arm64,linux/arm/v7
  - COSIGN_YES=true

snapshot:
  version_template: "latest"

checksum:
  name_template: "checksums.txt"

# Prevents parallel builds from stepping on each others toes downloading modules
before:
  hooks:
    - go mod tidy
    - /bin/bash -c 'if [ -n "$(git --no-pager diff --exit-code go.mod go.sum)" ]; then exit 1; fi'

# gomod:
#   proxy: true

sboms:
  - artifacts: archive

builds:
  - id: "falcosidekick"
    goos:
      - linux
    goarch:
      - amd64
      - arm64
      - arm
    goarm:
      - "7"
    env:
      - CGO_ENABLED=0
    flags:
      - -trimpath
    ldflags:
      - "{{ .Env.LDFLAGS }}"
    binary: falcosidekick

dockers_v2:
  - dockerfile: Dockerfile
    platforms:
      - linux/amd64
      - linux/arm64
      - linux/arm/v7

    images:
      - "falcosecurity/falcosidekick"
      - "public.ecr.aws/falcosecurity/falcosidekick"
    tags:
      - stable
      - "{{ .Version }}"
    labels:
      "org.opencontainers.image.created": "{{.Date}}"
      "org.opencontainers.image.name": "{{.ProjectName}}"
      "org.opencontainers.image.revision": "{{.FullCommit}}"
      "org.opencontainers.image.version": "{{.Version}}"
    extra_files:
      - LICENSE

signs:
  - id: falcosidekick
    signature: "${artifact}.bundle"
    cmd: cosign
    args: ["sign-blob", "--bundle", "${artifact}.bundle", "${artifact}"]
    artifacts: archive
  - id: checksum
    signature: "${artifact}.bundle"
    cmd: cosign
    args: ["sign-blob", "--bundle", "${artifact}.bundle", "${artifact}"]
    artifacts: checksum

docker_signs:
  - id: falcosidekick
    cmd: cosign
    args: ["sign", "--recursive", "${artifact}"]
    artifacts: manifests
    output: true

release:
  github:
    owner: falcosecurity
    name: falcosidekick
  prerelease: auto