Add more platforms, SBOMs and sign artifacts

.github/workflows/release.yml

@@ -2,11 +2,27 @@ name: goreleaser
 
 on:
   pull_request:
+    branches:
+      - master
   push:
+    branches:
+      - master
+    tags:
+      - "*"
+
+concurrency:
+  group: ${{ github.ref_name }}-goreleaser
+  cancel-in-progress: true
+
+permissions:
+  contents: read
 
 jobs:
   goreleaser:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      id-token: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -21,6 +37,10 @@ jobs:
       - name: Test
         run: go test ./...
 
+      - name: Install Cosign
+        uses: sigstore/cosign-installer@v3
+        if: github.ref_type == 'tag'
+
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v6
         with:

.goreleaser.yml

@@ -10,14 +10,41 @@ builds:
       - freebsd
       - windows
     goarch:
+      - 386
       - amd64
       - arm
       - arm64
-    ignore:
+      - ppc64le
+      - s390x
+    goarm:
+      - 6
+      - 7
+
+archives:
+  - format_overrides:
       - goos: windows
-        goarch: arm64
+        formats: ['zip']
+
+sboms:
+  - artifacts: archive
+    documents:
+      - "${artifact}.spdx.json"
+
 release:
   name_template: "{{.ProjectName}}-v{{.Version}}"
+
+signs:
+  - cmd: cosign
+    artifacts: checksum
+    output: true
+    certificate: "${artifact}.pem"
+    args:
+      - sign-blob
+      - "--output-signature=${signature}"
+      - "--output-certificate=${certificate}"
+      - "${artifact}"
+      - "--yes"
+
 brews:
   - repository:
       owner: rs
@@ -27,6 +54,7 @@ brews:
       email: [email protected]
     homepage: https://github.com/rs/curlie
     description: The power of curl, the ease of use of httpie.
+
 nfpms:
   - maintainer: Olivier Poitrey <[email protected]>
     description: curle is a frontend to curl that offers the ease of use of httpie without having to compromise curl features and performance.