kube-linter/.goreleaser.yaml at main · stackrox/kube-linter · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
# The lines below are called `modelines`. See `:help modeline`
# Feel free to remove those if you don't want/need to use them.
# yaml-language-server: $schema=https://goreleaser.com/static/schema.json
# vim: set ts=2 sw=2 tw=0 fo=cnqoj

version: 2

before:
  hooks:
    - go mod tidy
    - go generate ./...

builds:
  - env:
      - CGO_ENABLED=0
    goos:
      - linux
      - windows
      - darwin
    goarch:
      - amd64
      - arm64
    main: ./cmd/kube-linter
    flags:
      - "-mod=readonly"
      - "-trimpath"
    ldflags:
      - -s -w -X golang.stackrox.io/kube-linter/internal/version.version={{.Version}}
    mod_timestamp: "{{ .CommitTimestamp }}"


archives:
  - formats: [binary]
    name_template: >-
      {{ .ProjectName }}
      {{- if eq .Os "windows" }}
      {{- else }}-{{ .Os }}{{ end }}
      {{- if eq .Arch "amd64" }}
      {{- else }}_{{ .Arch }}{{ end }}
  - id: archive
    formats: [tar.gz]
    name_template: >-
      {{ .ProjectName }}-{{ .Os }}
      {{- if eq .Arch "amd64" }}
      {{- else }}_{{ .Arch }}{{ end }}

dockers_v2:
  - id: kube-linter
    dockerfile: image/Dockerfile
    ids:
      - kube-linter
    images:
      - "ghcr.io/stackrox/kube-linter"
      - "stackrox/kube-linter"
    tags:
      - "latest"
      - "{{ .Tag }}"
    platforms:
      - linux/amd64
      - linux/arm64
    labels:
      "org.opencontainers.image.title": "{{ .ProjectName }}"
      "org.opencontainers.image.vendor": "RedHat"
      "org.opencontainers.image.description": "Kube-Linter {{ .Version }}"
      "org.opencontainers.image.url": "https://kubelinter.io"
      "org.opencontainers.image.documentation": "https://docs.kubelinter.io/"
      "org.opencontainers.image.source": "{{ .GitURL }}"
      "org.opencontainers.image.licenses": "Apache"
      "org.opencontainers.image.version": "{{ .Version }}"
      "org.opencontainers.image.revision": "{{ .FullCommit }}"
      "org.opencontainers.image.created": "{{ .CommitDate }}"

  - id: kube-linter-alpine
    dockerfile: image/Dockerfile_alpine
    ids:
      - kube-linter
    images:
      - "ghcr.io/stackrox/kube-linter"
      - "stackrox/kube-linter"
    tags:
      - "latest-alpine"
      - "{{ .Tag }}-alpine"
    platforms:
      - linux/amd64
      - linux/arm64
    labels:
      "org.opencontainers.image.title": "{{ .ProjectName }}"
      "org.opencontainers.image.vendor": "RedHat"
      "org.opencontainers.image.description": "Kube-Linter {{ .Version }}"
      "org.opencontainers.image.url": "https://kubelinter.io"
      "org.opencontainers.image.documentation": "https://docs.kubelinter.io/"
      "org.opencontainers.image.source": "{{ .GitURL }}"
      "org.opencontainers.image.licenses": "Apache"
      "org.opencontainers.image.version": "{{ .Version }}"
      "org.opencontainers.image.revision": "{{ .FullCommit }}"
      "org.opencontainers.image.created": "{{ .CommitDate }}"


checksum:
  disable: true

signs:
  - cmd: cosign
    stdin: "{{ .Env.COSIGN_PASSWORD }}"
    signature: "${artifact}.sigstore.json"
    args:
      - "sign-blob"
      - "--key"
      - "env://KEY"
      - "--bundle=${signature}"
      - "${artifact}"
      - "--yes"
    artifacts: binary

docker_signs:
  - cmd: cosign
    artifacts: all
    args:
      - 'sign'
      - '${artifact}'
      - '--yes'
  - id: key
    cmd: cosign
    artifacts: all
    args:
      - 'sign'
      - "--key"
      - "env://KEY"
      - '${artifact}'
      - '--yes'

changelog:
  use: github-native