-
Notifications
You must be signed in to change notification settings - Fork 4
/
.goreleaser.yaml
117 lines (106 loc) · 3.17 KB
/
.goreleaser.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
project_name: gitops-zombies
builds:
- id: cli
main: ./cmd/
binary: gitops-zombies
goos:
- linux
- darwin
- windows
env:
- CGO_ENABLED=0
archives:
- id: cli
name_template: "{{ .ProjectName }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}"
builds:
- cli
checksum:
name_template: 'checksums.txt'
source:
enabled: true
name_template: "{{ .ProjectName }}_{{ .Version }}_source_code"
changelog:
use: github-native
sboms:
- id: source
artifacts: source
documents:
- "{{ .ProjectName }}_{{ .Version }}_sbom.spdx.json"
dockers:
- image_templates:
- ghcr.io/raffis/{{ .ProjectName }}:v{{ .Version }}-amd64
dockerfile: Dockerfile.release
use: buildx
ids:
- cli
build_flag_templates:
- --platform=linux/amd64
- --label=org.opencontainers.image.title={{ .ProjectName }}
- --label=org.opencontainers.image.description={{ .ProjectName }}
- --label=org.opencontainers.image.url=https://github.com/raffis/{{ .ProjectName }}
- --label=org.opencontainers.image.source=https://github.com/raffis/{{ .ProjectName }}
- --label=org.opencontainers.image.version={{ .Version }}
- --label=org.opencontainers.image.created={{ time "2006-01-02T15:04:05Z07:00" }}
- --label=org.opencontainers.image.revision={{ .FullCommit }}
- --label=org.opencontainers.image.licenses=Apache-2.0
- image_templates:
- "ghcr.io/raffis/{{ .ProjectName }}:v{{ .Version }}-arm64v8"
goarch: arm64
dockerfile: Dockerfile.release
use: buildx
ids:
- cli
build_flag_templates:
- --platform=linux/arm64/v8
- --label=org.opencontainers.image.title={{ .ProjectName }}
- --label=org.opencontainers.image.description={{ .ProjectName }}
- --label=org.opencontainers.image.url=https://github.com/raffis/{{ .ProjectName }}
- --label=org.opencontainers.image.source=https://github.com/raffis/{{ .ProjectName }}
- --label=org.opencontainers.image.version={{ .Version }}
- --label=org.opencontainers.image.created={{ time "2006-01-02T15:04:05Z07:00" }}
- --label=org.opencontainers.image.revision={{ .FullCommit }}
- --label=org.opencontainers.image.licenses=Apache-2.0
docker_manifests:
- name_template: ghcr.io/raffis/{{ .ProjectName }}:v{{ .Version }}
image_templates:
- ghcr.io/raffis/{{ .ProjectName }}:v{{ .Version }}-amd64
- ghcr.io/raffis/{{ .ProjectName }}:v{{ .Version }}-arm64v8
- name_template: ghcr.io/raffis/{{ .ProjectName }}:latest
image_templates:
- ghcr.io/raffis/{{ .ProjectName }}:v{{ .Version }}-amd64
- ghcr.io/raffis/{{ .ProjectName }}:v{{ .Version }}-arm64v8
brews:
- ids:
- cli
tap:
owner: raffis
name: gitops-zombies
token: "{{ .Env.REPO_TOKEN }}"
description: Identify kubernetes resources which are not managed by GitOps
homepage: https://github.com/raffis/{{ .ProjectName }}
folder: Formula
test: |
system "#{bin}/gitops-zombies -h"
signs:
- cmd: cosign
certificate: "${artifact}.pem"
env:
- COSIGN_EXPERIMENTAL=1
args:
- sign-blob
- "--output-certificate=${certificate}"
- "--output-signature=${signature}"
- "${artifact}"
- --yes
artifacts: checksum
output: true
docker_signs:
- cmd: cosign
env:
- COSIGN_EXPERIMENTAL=1
artifacts: images
output: true
args:
- 'sign'
- '${artifact}'
- --yes