/
.goreleaser.yml
91 lines (88 loc) · 3.13 KB
/
.goreleaser.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
project_name: k8s-shredder
release:
github:
owner: adobe
name: k8s-shredder
builds:
- id: k8s-shredder
goos:
- linux
- windows
- darwin
goarch:
- amd64
- "386"
- arm64
env:
- CGO_ENABLED=0
main: .
ldflags:
- -s -w -X github.com/adobe/k8s-shredder/cmd.buildVersion=v{{.Version}} -X github.com/adobe/k8s-shredder/cmd.gitSHA={{.Commit}} -X github.com/adobe/k8s-shredder/cmd.buildTime={{.Date}}
flags:
- -trimpath
binary: k8s-shredder
# signs the checksum file
# all files (including the sboms) are included in the checksum, so we don't need to sign each one if we don't want to
# https://goreleaser.com/customization/sign
signs:
- cmd: cosign
env:
- COSIGN_EXPERIMENTAL=1
certificate: '${artifact}.pem'
args:
- sign-blob
- '--output-certificate=${certificate}'
- '--output-signature=${signature}'
- '${artifact}'
- "--yes" # needed on cosign 2.0.0+
artifacts: checksum
output: true
dockers:
- image_templates: ["ghcr.io/adobe/{{ .ProjectName }}:v{{ .Version }}-amd64"]
use: buildx
dockerfile: Dockerfile
build_flag_templates:
- "--platform=linux/amd64"
- "--label=org.opencontainers.image.title={{ .ProjectName }}"
- "--label=org.opencontainers.image.description={{ .ProjectName }}"
- "--label=org.opencontainers.image.url=https://github.com/adobe/{{ .ProjectName }}"
- "--label=org.opencontainers.image.source=https://github.com/adobe/{{ .ProjectName }}"
- "--label=org.opencontainers.image.version=v{{ .Version }}"
- "--label=org.opencontainers.image.created={{ .Date }}"
- "--label=org.opencontainers.image.revision={{ .FullCommit }}"
- "--label=org.opencontainers.image.licenses=Apache2.0"
- image_templates: ["ghcr.io/adobe/{{ .ProjectName }}:v{{ .Version }}-arm64v8"]
use: buildx
goarch: arm64
dockerfile: Dockerfile
build_flag_templates:
- "--platform=linux/arm64/v8"
- "--label=org.opencontainers.image.title={{ .ProjectName }}"
- "--label=org.opencontainers.image.description={{ .ProjectName }}"
- "--label=org.opencontainers.image.url=https://github.com/adobe/{{ .ProjectName }}"
- "--label=org.opencontainers.image.source=https://github.com/adobe/{{ .ProjectName }}"
- "--label=org.opencontainers.image.version=v{{ .Version }}"
- "--label=org.opencontainers.image.created={{ .Date }}"
- "--label=org.opencontainers.image.revision={{ .FullCommit }}"
- "--label=org.opencontainers.image.licenses=Apache2.0"
docker_manifests:
- name_template: ghcr.io/adobe/{{.ProjectName}}:v{{.Version}}
image_templates:
- ghcr.io/adobe/{{.ProjectName}}:v{{.Version}}-amd64
- ghcr.io/adobe/{{.ProjectName}}:v{{.Version}}-arm64v8
- name_template: ghcr.io/adobe/{{.ProjectName}}:latest
image_templates:
- ghcr.io/adobe/{{.ProjectName}}:v{{.Version}}-amd64
- ghcr.io/adobe/{{.ProjectName}}:v{{.Version}}-arm64v8
# signs our docker image
# https://goreleaser.com/customization/docker_sign
docker_signs:
- cmd: cosign
env:
- COSIGN_EXPERIMENTAL=1
artifacts: images
output: true
args:
- 'sign'
- '${artifact}'
- "--yes" # needed on cosign 2.0.0+