Add go buildflag -trimpath to also make go binary reproducible outside of Docker

Author: louisroyer

.github/workflows/create-release.yml

@@ -36,7 +36,7 @@ jobs:
       - name: Install depends
         run: go get .
       - name: Build
-        run: go build -v -o ${{ steps.repo.outputs.repo }}-${{ steps.version.outputs.version }}-${{ matrix.os }}-${{ matrix.arch }}
+        run: go build -v -trimpath -o ${{ steps.repo.outputs.repo }}-${{ steps.version.outputs.version }}-${{ matrix.os }}-${{ matrix.arch }}
       - name: Generate artifact attestation
         uses: actions/attest@v4
         with:

Dockerfile

@@ -10,7 +10,7 @@ RUN go mod download && go mod verify
 COPY . .
 # To make reproducible the `COPY --from=builder` layer reproducible, we set modification time to build timestamp
 # and we will copy the directory at once to avoid /usr/local/bin being "created" instead of copied (resulting in wrong a newer modification time).
-RUN CGO_ENABLED=0 go build -o /usr/local/bin/ue-lite && touch --no-dereference --date="@$(ue-lite --build-timestamp)" /usr/local/bin /usr/local/bin/ue-lite
+RUN CGO_ENABLED=0 go build -trimpath -o /usr/local/bin/ue-lite && touch --no-dereference --date="@$(ue-lite --build-timestamp)" /usr/local/bin /usr/local/bin/ue-lite
 
 FROM alpine:3.23.3
 COPY --from=builder /usr/local/bin /usr/local/bin

Makefile

@@ -11,7 +11,7 @@ MKDIRP = mkdir -p
 .PHONY: install uninstall build clean default
 default: build
 build:
-	go build
+	CGO_ENABLED=0 go build -trimpath
 clean:
 	go clean
 reinstall: uninstall install