-
Notifications
You must be signed in to change notification settings - Fork 0
/
.goreleaser.yml
155 lines (137 loc) · 3.93 KB
/
.goreleaser.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
# This is an example .goreleaser.yml file with some sensible defaults.
# Make sure to check the documentation at https://goreleaser.com
before:
hooks:
# You may remove this if you don't use go modules.
- go mod tidy
builds:
- main: "./main.go"
binary: vault-token-monitor
env:
- CGO_ENABLED=0
goos:
- linux
- darwin
- windows
goarch:
- amd64
- arm64
# - arm
# - 386
ldflags:
## auto inject commit and version at build time
- -X github.com/vdbulcke/vault-token-monitor/cmd.GitCommit={{ .ShortCommit }}
- -X github.com/vdbulcke/vault-token-monitor/cmd.Version={{ .Version }}
- -X github.com/vdbulcke/vault-token-monitor/cmd.Date={{ .CommitDate }}
- -X github.com/vdbulcke/vault-token-monitor/cmd.BuiltBy=goreleaser
archives:
-
## Deprecated "replacements"
# replacements:
# ## Rewrite Archive name
# darwin: Darwin
# linux: Linux
# windows: Windows
# 386: i386
# amd64: x86_64
name_template: >-
{{ .ProjectName }}_{{ .Version }}_
{{- title .Os }}_
{{- if eq .Arch "amd64" }}x86_64
{{- else if eq .Arch "386" }}i386
{{- else }}{{ .Arch }}{{ end }}
{{- if .Arm }}v{{ .Arm }}{{ end }}
## use zip for windows release
format_overrides:
- goos: windows
format: zip
files:
- LICENSE
## create MacOS universal binary
universal_binaries:
## set to true to ONLY generate a universal binary
- replace: false
checksum:
name_template: 'checksums.txt'
snapshot:
name_template: "{{ incpatch .Version }}-next"
changelog:
sort: asc
filters:
exclude:
## ignore commits from change log that starts with
- '^docs:'
- '^test:'
- '^typo:'
- '^ignore:'
# Group commits messages by given regex and title.
# Order value defines the order of the groups.
# Proving no regex means all commits will be grouped under the default group.
# Groups are disabled when using github-native, as it already groups things by itself.
#
# Default is no groups.
groups:
- title: Features
regexp: "^.*feat[(\\w)]*:+.*$"
order: 0
- title: 'Bug fixes'
regexp: "^.*fix[(\\w)]*:+.*$"
order: 1
- title: Others
order: 999
dockers:
-
# GOOS of the built binaries/packages that should be used.
goos: linux
# GOARCH of the built binaries/packages that should be used.
goarch: amd64
# GOARM of the built binaries/packages that should be used.
goarm: ''
image_templates:
- "ghcr.io/vdbulcke/vault-token-monitor:v{{ .Version }}"
##
## Cosign
##
signs:
- cmd: cosign
signature: "${artifact}.sig"
certificate: '${artifact}.pem'
output: true
args:
- "sign-blob"
- "--oidc-issuer=https://token.actions.githubusercontent.com"
- "--output-certificate=${artifact}.pem"
- "--output-signature=${artifact}.sig"
- "${artifact}"
artifacts: all
docker_signs:
- cmd: cosign
env:
- COSIGN_EXPERIMENTAL=1
artifacts: all
output: true
args:
- 'sign'
- "--oidc-issuer=https://token.actions.githubusercontent.com"
- '${artifact}'
release:
## set github header and footer
header: |
## Docker
### pull
```bash
docker pull ghcr.io/vdbulcke/vault-token-monitor:v{{ .Version }}
```
### Validate Cosign Signature
```bash
cosign verify --certificate-oidc-issuer https://token.actions.githubusercontent.com --certificate-identity "https://github.com/vdbulcke/vault-token-monitor/.github/workflows/release.yaml@refs/tags/v{{ .Version }}" ghcr.io/vdbulcke/vault-token-monitor:v{{ .Version }}
```
### Run
```bash
docker run --rm -v /path/to/your/config.yaml:/app/config.yaml:z -p 9000:9000 ghcr.io/vdbulcke/vault-token-monitor:v{{ .Version }}
```
# # Footer template for the release body.
# # Defaults to empty.
# footer: |
# ## Thanks!
# Those were the changes on {{ .Tag }}!