feat: Support installation via the most common Linux package managers (…

…#338)

* feat: Support installation via Linux package managers

- Convert existing Linux build process to use nFPM
- Publish packages via `fury.io`

Limitation: packages are not currently signed; in the future, we could
investigate using [Cosign])https://github.com/sigstore/cosign) for this.

Closes #337

* WIP: Temporary workflow and GoReleaser configuration to test Linux package build

* Revert "WIP: Temporary workflow and GoReleaser configuration to test Linux package build"

This reverts commit 08e1160.

.github/workflows/release.yml

@@ -156,3 +156,4 @@ jobs:
           HOMEBREW_TAP_GITHUB_TOKEN: ${{ secrets.BEARER_GITHUB_TOKEN }}
           DISCORD_WEBHOOK_ID: ${{ secrets.DISCORD_WEBHOOK_ID }}
           DISCORD_WEBHOOK_TOKEN: ${{ secrets.DISCORD_WEBHOOK_TOKEN }}
+          FURY_TOKEN: ${{ secrets.FURY_TOKEN }}

.goreleaser.yaml

@@ -63,3 +63,23 @@ announce:
       Curio {{ .Tag }} is out now! Check it out: https://github.com/Bearer/curio/releases/tag/{{ .Tag }}
 
       {{ .ReleaseNotes }}
+
+nfpms:
+  -
+    formats:
+      - deb
+      - rpm
+      - archlinux
+    vendor: Bearer
+    homepage: "https://curio.sh"
+    maintainer: "Bearer <dev@bearer.sh>"
+    description: "A data-first security scanner that finds risks and vulnerabilities in your code so you can protect sensitive data (PHI, PD, PII)."
+    license: "Elastic License 2.0"
+    file_name_template: "{{.ProjectName}}_{{.Version}}_{{.Os}}-{{.Arch}}"
+    dependencies:
+      - git
+
+furies:
+  -
+    account: bearer
+    secret_name: FURY_TOKEN

README.md

@@ -55,6 +55,30 @@ Or, if your platform supports it, with [Homebrew](https://brew.sh/) using [Curio
 brew install Bearer/curio/curio
 ```
 
+#### Debian/Ubuntu
+
+```shell
+$ sudo apt-get install apt-transport-https
+$ echo deb [trusted=yes] https://apt.fury.io/bearer/ / | sudo tee -a /etc/apt/sources.list.d/fury.list
+$ sudo apt-get update
+$ sudo apt-get install curio
+```
+
+#### RHEL/CentOS
+
+Add repository setting
+
+```shell
+$ sudo vim /etc/yum.repos.d/fury.repo
+[fury]
+name=Gemfury Private Repo
+baseurl=https://yum.fury.io/bearer/
+enabled=1
+gpgcheck=0
+$ sudo yum -y update
+$ sudo yum -y install curio
+```
+
 [Additional installation options](#gear-additional-installation-options) are available.
 
 ### Scan your project