.goreleaser.yml

# yaml-language-server: $schema=https://goreleaser.com/static/schema.json
version: 2

env:
  - CGO_ENABLED=0

before:
  hooks:
    - go mod tidy
    - go mod vendor

builds:
  - id: linux-build
    main: ./cmd/sbomlyze
    binary: sbomlyze
    goos: [linux]
    goarch: [amd64, arm64, "386"]
    mod_timestamp: &build-timestamp '{{ .CommitTimestamp }}'
    ldflags: &build-ldflags |
      -w
      -s
      -extldflags '-static'
      -X github.com/rezmoss/sbomlyze/internal/version.Version={{.Version}}
      -X github.com/rezmoss/sbomlyze/internal/version.Commit={{.Commit}}
      -X github.com/rezmoss/sbomlyze/internal/version.Date={{.Date}}
      -X github.com/rezmoss/sbomlyze/internal/version.BuildSource=binaryRelease

  - id: linux-arm-build
    main: ./cmd/sbomlyze
    binary: sbomlyze
    goos: [linux]
    goarch: [arm]
    goarm: ["6", "7"]
    mod_timestamp: *build-timestamp
    ldflags: *build-ldflags

  - id: darwin-build
    main: ./cmd/sbomlyze
    binary: sbomlyze
    goos: [darwin]
    goarch: [amd64, arm64]
    mod_timestamp: *build-timestamp
    ldflags: *build-ldflags

  - id: windows-build
    main: ./cmd/sbomlyze
    binary: sbomlyze
    goos: [windows]
    goarch: [amd64]
    mod_timestamp: *build-timestamp
    ldflags: *build-ldflags

archives:
  - id: linux-archives
    ids: [linux-build, linux-arm-build]
    name_template: >-
      {{ .ProjectName }}_
      {{- .Version }}_
      {{- title .Os }}_
      {{- if eq .Arch "amd64" }}x86_64
      {{- else if eq .Arch "386" }}i386
      {{- else if .Arm }}{{ .Arch }}v{{ .Arm }}
      {{- else }}{{ .Arch }}{{ end }}
    formats:
      - tar.gz

  - id: darwin-archives
    ids: [darwin-build]
    name_template: >-
      {{ .ProjectName }}_
      {{- .Version }}_
      {{- title .Os }}_
      {{- if eq .Arch "amd64" }}x86_64
      {{- else }}{{ .Arch }}{{ end }}
    formats:
      - tar.gz

  - id: windows-archives
    ids: [windows-build]
    name_template: >-
      {{ .ProjectName }}_
      {{- .Version }}_
      {{- title .Os }}_
      {{- if eq .Arch "amd64" }}x86_64
      {{- else }}{{ .Arch }}{{ end }}
    formats:
      - zip

checksum:
  name_template: "checksums.txt"

# Generate SBOMs for each archive using Syft
sboms:
  - artifacts: archive
    cmd: syft
    documents:
      - >-
        {{ .Binary }}_{{ .Version }}_{{ .Os }}_
        {{- if .Arm }}{{ .Arch }}v{{ .Arm }}
        {{- else if eq .Arch "amd64" }}x86_64
        {{- else if eq .Arch "386" }}i386
        {{- else }}{{ .Arch }}{{ end }}.sbom
    args:
      - "scan"
      - "$artifact"
      - "--output"
      - "json=$document"

# Linux packages (.deb, .rpm, .apk)
nfpms:
  - id: packages
    package_name: sbomlyze
    vendor: rezmoss
    homepage: &website "https://github.com/rezmoss/sbomlyze"
    maintainer: rezmoss <rezmoss@users.noreply.github.com>
    description: &description "A fast, reliable SBOM diff and analysis tool"
    license: Apache-2.0
    formats:
      - deb
      - rpm
      - apk
    bindir: /usr/bin
    section: utils
    priority: optional
    contents:
      - src: ./LICENSE
        dst: /usr/share/licenses/sbomlyze/LICENSE
      - src: ./README.md
        dst: /usr/share/doc/sbomlyze/README.md

snapshot:
  version_template: "{{ .Tag }}-next"

changelog:
  sort: asc
  filters:
    exclude:
      - "^docs:"
      - "^test:"
      - "^bump"
      - "^chore:"
      - Merge pull request
      - Merge branch

release:
  github:
    owner: rezmoss
    name: sbomlyze
  draft: false
  prerelease: auto
  name_template: "{{.ProjectName}} v{{.Version}}"

brews:
  - repository:
      owner: rezmoss
      name: homebrew-sbomlyze
      token: "{{ .Env.HOMEBREW_TAP_GITHUB_TOKEN }}"
    ids: [darwin-archives, linux-archives]
    directory: Formula
    homepage: *website
    description: *description
    license: "Apache-2.0"
    test: |
      system "#{bin}/sbomlyze", "--version"
    install: |
      bin.install "sbomlyze"