Merge pull request #45 from safedep/goreleaser-update

adding homebrew-vet tap

Author: abhisek

.github/workflows/goreleaser.yml

@@ -7,6 +7,7 @@ on:
 
 permissions:
   contents: read
+  contents: write
 
 jobs:
   goreleaser:
@@ -42,9 +43,9 @@ jobs:
         uses: goreleaser/goreleaser-action@8f67e590f2d095516493f017008adc464e63adb1 # v4.1.0
         with:
           version: latest
-          args: release --rm-dist
+          args: release --clean
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GORELEASER_GITHUB_TOKEN }}
       - name: Generate subject
         id: hash
         env:

.goreleaser.yaml

@@ -7,13 +7,37 @@ before:
 builds:
   - env:
       - CGO_ENABLED=0
+    binary: vet
     goos:
       - linux
       - darwin
     goarch:
       - amd64
       - arm64
 
+release:
+  # for prerelease it doesn't build and distribute
+  prerelease: auto
+
+universal_binaries:
+  - replace: true
+
+brews:
+  - name: vet
+    homepage: https://safedep.io
+    description: "SafeDep vet is a tool for identifying open source software supply chain risks"
+    license: "Apache-2.0"
+    tap:
+      owner: safedep
+      name: homebrew-tap
+      branch: main
+
+      # TODO: Move to PR workflow once v1.17 is released
+      # branch: develop/vet
+      # pull_request:
+      #   enabled: true
+      #   base: main
+
 archives:
   - format: tar.gz
     name_template: >-