.goreleaser.yaml

# yaml-language-server: $schema=https://goreleaser.com/static/schema.json
# vim: set ts=2 sw=2 tw=0 fo=cnqoj
project_name: frizbee
version: 2
# This section defines the build matrix.
builds:
  - env:
      - GO111MODULE=on
      - CGO_ENABLED=0
    flags:
      - -trimpath
      - -tags=netgo
    ldflags:
      - "-s -w"
      - "-X main.Version={{ .Env.VERSION }}"
      - "-X main.Commit={{ .Env.COMMIT }}"
      - "-X main.CommitDate={{ .Env.COMMIT_DATE }}"
      - "-X main.TreeState={{ .Env.TREE_STATE }}"
      - "-X github.com/stacklok/frizbee/internal/cli.CLIVersion={{ .Env.VERSION }}"
    goos:
      - linux
      - windows
      - darwin
    goarch:
      - amd64
      - arm64
    main: ./main.go
# This section defines the release format.
archives:
  - format: tar.gz # we can use binary, but it seems there's an issue where goreleaser skips the sboms
    name_template: "{{ .ProjectName }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}"
    format_overrides:
      - goos: windows
        format: zip
# This section defines how to release to winget.
# winget:
#   - name: frizbee
#     publisher: stacklok
#     license: Apache-2.0
#     license_url: "https://github.com/stacklok/frizbee/blob/main/LICENSE"
#     copyright: Stacklok, Inc.
#     homepage: https://stacklok.com
#     short_description: 'frizbee is a tool you may throw a tag at and it comes back with a checksum.'
#     publisher_support_url: "https://github.com/stacklok/frizbee/issues/new/choose"
#     package_identifier: "stacklok.frizbee"
#     url_template: "https://github.com/stacklok/frizbee/releases/download/{{ .Tag }}/{{ .ArtifactName }}"
#     skip_upload: auto
#     release_notes: "{{.Changelog}}"
#     tags:
#       - golang
#       - cli
#     commit_author:
#       name: stacklokbot
#       email: info@stacklok.com
#     goamd64: v1
#     repository:
#       owner: stacklok
#       name: winget-pkgs
#       branch: "frizbee-{{.Version}}"
#       token: "{{ .Env.WINGET_GITHUB_TOKEN }}"
#       pull_request:
#         enabled: true
#         draft: false
#         base:
#           owner: microsoft
#           name: winget-pkgs
#           branch: master
# This section defines whether we want to release the source code too.
source:
  enabled: true
# This section defines how to generate the changelog
changelog:
  sort: asc
  use: github
# This section defines for which artifact types to generate SBOMs.
sboms:
  - artifacts: archive
# This section defines the release policy.
release:
  github:
    owner: stacklok
    name: frizbee
# This section defines how and which artifacts we want to sign for the release.
signs:
  - cmd: cosign
    args:
      - "sign-blob"
      - "--output-signature=${signature}"
      - "--output-certificate=${certificate}"
      - "${artifact}"
      - "--yes" # needed on cosign 2.0.0+
    artifacts: archive
    output: true
    certificate: '{{ trimsuffix (trimsuffix .Env.artifact ".zip") ".tar.gz" }}.pem'