kshark-core/.goreleaser.yaml at main · scalytics/kshark-core · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
# .goreleaser.yaml
#
# Build configuration for GoReleaser.
# See https://goreleaser.com/customization/ for more options.

project_name: kshark

before:
  hooks:
    - go mod tidy
    - go vet ./...

builds:
  - id: kshark
    main: ./cmd/kshark
    binary: kshark
    env:
      - CGO_ENABLED=0
    goos:
      - linux
      - windows
      - darwin
    goarch:
      - amd64
      - arm64
    ldflags:
      - -s -w -X main.version={{.Version}} -X main.commit={{.Commit}} -X main.date={{.Date}}

archives:
  - id: default
    name_template: >-
      {{ .ProjectName }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}
    format: tar.gz
    format_overrides:
      - goos: windows
        format: zip
    files:
      - LICENSE
      - README.md
      - client.properties.example
      - ai_config.json.example
      - web/templates/**/*

checksum:
  name_template: 'checksums.txt'
  algorithm: sha256

# SBOM generation -- produces CycloneDX and SPDX for each archive
sboms:
  - artifacts: archive
    documents:
      - "{{ .ArtifactName }}.sbom.cdx.json"

# Cosign signing -- keyless via GitHub OIDC (Sigstore)
signs:
  - cmd: cosign
    artifacts: checksum
    output: true
    args:
      - sign-blob
      - "--yes"
      - "--output-certificate=${certificate}"
      - "--output-signature=${signature}"
      - "${artifact}"

brews:
  - name: kshark
    repository:
      owner: scalytics
      name: homebrew-tap
      token: "{{ .Env.HOMEBREW_TAP_GITHUB_TOKEN }}"
    homepage: "https://github.com/scalytics/kshark-core"
    description: "Kafka connectivity diagnostic tool — layered probe from DNS to produce/consume"
    license: "Apache-2.0"
    install: |
      bin.install "kshark"
    test: |
      system "#{bin}/kshark", "--version"

snapshot:
  name_template: "{{ incpatch .Version }}-next"

changelog:
  sort: asc
  groups:
    - title: Features
      regexp: '^.*?feat(\([[:word:]]+\))??!?:.+$'
      order: 0
    - title: Bug Fixes
      regexp: '^.*?fix(\([[:word:]]+\))??!?:.+$'
      order: 1
    - title: Other
      order: 999
  filters:
    exclude:
      - '^docs:'
      - '^test:'
      - '^chore:'

release:
  name_template: "kshark v{{.Version}}"
  prerelease: auto
  header: |
    ## kshark v{{.Version}}

    Cross-platform Kafka connectivity diagnostic tool.

    ### Verification

    ```bash
    # Verify checksum signature (requires cosign)
    cosign verify-blob \
      --certificate checksums.txt.pem \
      --signature checksums.txt.sig \
      --certificate-identity-regexp='https://github.com/scalytics/kshark-core' \
      --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
      checksums.txt

    # Verify file integrity
    sha256sum -c checksums.txt
    ```
  footer: |
    ---
    **Full Changelog**: https://github.com/scalytics/kshark-core/compare/{{ .PreviousTag }}...{{ .Tag }}