complyctl/.goreleaser.yaml at main · complytime/complyctl · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
# yaml-language-server: $schema=https://goreleaser.com/static/schema.json
# vim: set ts=2 sw=2 tw=0 fo=cnqoj

version: 2

project_name: complyctl

before:
    hooks:
        - go mod tidy
        - go mod vendor
        #- go generate ./...

builds:
    - id: complyctl
      binary: complyctl
      main: ./cmd/complyctl/
      env:
          - CGO_ENABLED=0
      goos:
          - linux
      ldflags:
          - "-X github.com/complytime/complyctl/internal/version.version={{ .Version }}"
          - "-X github.com/complytime/complyctl/internal/version.gitTreeState={{ .GitTreeState }}"
          - "-X github.com/complytime/complyctl/internal/version.commit={{ .Commit }}"
          - "-X github.com/complytime/complyctl/internal/version.buildDate={{ .Date }}"
    - id: openscap-plugin
      binary: openscap-plugin
      dir: ./cmd/openscap-plugin
      main: .
      goos:
          - linux

archives:
    - format: tar.gz
      # this name template makes the OS and Arch compatible with the results of `uname`.
      name_template: >-
          {{ .ProjectName }}_
          {{- .Os }}_
          {{- if eq .Arch "amd64" }}x86_64
          {{- else if eq .Arch "386" }}i386
          {{- else }}{{ .Arch }}{{ end }}
          {{- if .Arm }}v{{ .Arm }}{{ end }}

changelog:
    sort: asc
    use: github
    format: "{{ .SHA }}: {{ .Message }} ({{ with .AuthorUsername }}@{{ . }}{{ else }}{{ .AuthorName }}{{ end }})"
    filters:
        exclude:
            - "^docs:"
            - "^test:"
            - Merge pull request
    groups:
        - title: "New Features"
          regexp: '^.*?feat(\(.+\))??!?:.+$'
          order: 100
        - title: "Security Updates"
          regexp: '^.*?sec(\(.+\))??!?:.+$'
          order: 150
        - title: "Bug Fixes"
          regexp: '^.*?(fix|refactor)(\(.+\))??!?:.+$'
          order: 200
        - title: "Dependency Updates"
          regexp: '^.*chore\(deps\):.*$'
          order: 250
        - title: "Infrastructure Updates"
          regexp: '^.*ci(\(.*\))?:.*$'
          order: 300
        - title: "Documentation Updates"
          regexp: '^.*?docs?(\(.+\))??!?:.+$'
          order: 400
        - title: "Other Work"
          order: 9999

sboms:
    - id: archive
      artifacts: archive
    - id: source
      artifacts: source

signs:
    - cmd: cosign
      signature: "${artifact}.sigstore.json"
      args:
          - "sign-blob"
          - "--bundle=${signature}"
          - "${artifact}"
          - "--yes"
      artifacts: checksum
      output: true