Added support for go 1.17 and darwin-arm64 (Apple Silicon)

[nklmilojevic]

• Changes from go 1.13/1.15 to go 1.16
• Adds matrix build and binaries for arm64 (Apple Silicon specifically)

[nklmilojevic]

Any maintainers around? cc @ajvb

[niksauer]

I would really appreciate ARM binaries too. Please keep this project up-to-date.

[tlamr]

I love this!

[tlamr]

@autrilla @ajvb Hello guys, having arm64 build is something we desperately need.
It is very common these days that people run arm64 only stuff on public cloud (like graviton @ aws), and sops is probably the only tool that does not have arm64 binaries currently.
Would you know who can help with this being review?

Thank you,
Tomas

[kennethredler]

Only offering a stop gap; I've temporarily worked around the "lack" of arm64 binaries by simply building (in a container):

$ GO111MODULE=on
$ GO15VENDOREXPERIMENT=1
$ ${GOROOT}/bin/go install go.mozilla.org/sops/v3/cmd/sops@v${TARGET_SOPS_VERSION}
$ ${GOPATH}/bin/sops --version

NOTE: This project's README.rst describes a slightly different method:

$ go get -u go.mozilla.org/sops/v3/cmd/sops
$ cd $GOPATH/src/go.mozilla.org/sops/
$ git checkout v${TARGET_SOPS_VERSION}
$ make install

[willjschmitt]

This would be a very welcome change, since with Apple discontinuing Intel MacBook Pros, it's becoming critical to have built-binaries of sops for arm64 distros. We can build from source, but plenty of toolchains depend on pre-built binaries to load directly

[hugomcfonseca]

It would be great to take advantage of this PR, and configure the build and release of ARM64 binary for Linux as well.

[fcosta-td]

@autrilla @jvehent @ajvb appologies for tagging you directly, but could any of you please review this Pull Request? 🙏

[slimm609]

@nklmilojevic can you rebase this off the latest so it picks up the 1.17 changes that were merged?

[nklmilojevic]

@slimm609 done, but still need someone from maintainers to approve it cc @ajvb

[slimm609]

hopefully @rforsythe or @ajvb can approve this and cut a release soon to at least get support for it. There are several golang CVEs that are showing in scans against the binary. Most are false positives but still show in scans for go 1.14,1.15,1.16

[ajvb]

Thank you very much @nklmilojevic!