gittuf/.goreleaser.yml at main · zsun6/gittuf · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
version: 2

project_name: gittuf

builds:
- id: gittuf
  mod_timestamp: '{{ .CommitTimestamp }}'
  env:
  - CGO_ENABLED=0
  flags:
  - -trimpath
  goos:
  - linux
  - darwin
  - freebsd
  - windows
  goarch:
  - amd64
  - arm64
  ldflags:
  - "-s -w"
  - "-extldflags=-zrelro"
  - "-extldflags=-znow"
  - "-buildid= -X github.com/gittuf/gittuf/internal/version.gitVersion={{ .Version }}"

- id: git-remote-gittuf
  mod_timestamp: '{{ .CommitTimestamp }}'
  main: ./internal/git-remote-gittuf
  binary: git-remote-gittuf
  env:
  - CGO_ENABLED=0
  flags:
  - -trimpath
  goos:
  - linux
  - darwin
  - freebsd
  - windows
  goarch:
  - amd64
  - arm64
  ldflags:
  - "-s -w"
  - "-extldflags=-zrelro"
  - "-extldflags=-znow"
  - "-buildid= -X github.com/gittuf/gittuf/internal/version.gitVersion={{ .Version }}"

archives:
- id: binary
  formats: ['binary']
  allow_different_binary_count: true

# This section defines how gittuf releases are automatically sent to WinGet as
# pull requests.
# Configuration inspired from that of the Minder project:
# https://github.com/mindersec/minder/blob/main/.goreleaser.yaml
winget:
  - name: gittuf
    publisher: gittuf
    license: Apache-2.0
    license_url: "https://github.com/gittuf/gittuf/blob/main/LICENSE"
    copyright: The gittuf Authors
    homepage: https://gittuf.dev/
    short_description: 'A security layer for Git repositories'
    publisher_support_url: "https://github.com/gittuf/gittuf/issues"
    package_identifier: "gittuf.gittuf"
    url_template: "https://github.com/gittuf/gittuf/releases/download/{{ .Tag }}/{{ .ArtifactName }}"
    skip_upload: auto
    release_notes: "https://github.com/gittuf/gittuf/blob/main/CHANGELOG.md#v{{ .Major }}{{ .Minor }}{{ .Patch }}"
    tags:
      - cli
      - access-control
      - git
      - git-security
      - gittuf
    commit_author:
      name: openssf-robot
      email: openssf-robot@openssf.org
    goamd64: v1
    repository:
      owner: gittuf
      name: winget-pkgs
      branch: "gittuf-{{.Version}}"
      token: "{{ .Env.WINGET_GITHUB_TOKEN }}"
      pull_request:
        enabled: true
        draft: false
        base:
          owner: microsoft
          name: winget-pkgs
          branch: master

gomod:
  proxy: true

changelog:
  disable: true

signs:
- cmd: cosign
  env:
  - COSIGN_YES=true
  certificate: '${artifact}.pem'
  signature: '${artifact}.sig'
  args:
  - sign-blob
  - '--output-certificate=${certificate}'
  - '--output-signature=${signature}'
  - '${artifact}'
  artifacts: binary
  output: true

release:
  prerelease: allow
  github:
    owner: gittuf
    name: gittuf
  draft: true