wolfictl/.goreleaser.yaml at main · wolfi-dev/wolfictl · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
# Copyright 2025 Chainguard, Inc.
# SPDX-License-Identifier: Apache-2.0

version: 2
project_name: wolfictl

archives:
  - formats:
      - 'binary'

checksum:
  name_template: "{{ .ProjectName }}_checksums.txt"

builds:
  - id: wolfictl
    dir: .
    main: .
    binary: wolfictl_{{ .Os }}_{{ .Arch }}
    no_unique_dist_dir: true
    env:
      - CGO_ENABLED=0
    flags:
      - -trimpath
    ldflags:
      - '-s -w'
      - -X sigs.k8s.io/release-utils/version.gitVersion={{.Version}}
      - -X sigs.k8s.io/release-utils/version.gitCommit={{.Commit}}
      - -X sigs.k8s.io/release-utils/version.buildDate={{.Date}}
    goos:
      - linux
      - darwin
    goarch:
      - amd64
      - arm64

signs:
  - id: binary
    artifacts: binary
    signature: "${artifact}.sig"
    certificate: "${artifact}.cert.pem"
    cmd: cosign
    args:
      - sign-blob
      - "--yes"
      - "--output-signature=${artifact}.sig"
      - "--output-certificate=${artifact}.cert.pem"
      - "${artifact}"
  - id: checksum
    artifacts: checksum
    signature: "${artifact}.sig"
    certificate: "${artifact}.cert.pem"
    cmd: cosign
    args:
      - sign-blob
      - "--yes"
      - "--output-signature=${artifact}.sig"
      - "--output-certificate=${artifact}.cert.pem"
      - "${artifact}"

snapshot:
  version_template: "{{ .Version }}-SNAPSHOT"

release:
  draft: false

changelog:
  use: github-native