slb/.goreleaser.yaml at main · Dicklesworthstone/slb · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
# GoReleaser configuration for SLB
# https://goreleaser.com

version: 2

project_name: slb

before:
  hooks:
    - go mod tidy
    - go generate ./...

builds:
  - id: slb
    main: ./cmd/slb
    binary: slb
    env:
      - CGO_ENABLED=0
    goos:
      - linux
      - darwin
      - windows
    goarch:
      - amd64
      - arm64
    ignore:
      - goos: windows
        goarch: arm64
    ldflags:
      - -s -w
      - -X github.com/Dicklesworthstone/slb/internal/cli.version={{.Version}}
      - -X github.com/Dicklesworthstone/slb/internal/cli.commit={{.Commit}}
      - -X github.com/Dicklesworthstone/slb/internal/cli.date={{.Date}}

archives:
  - id: default
    formats:
      - tar.gz
    name_template: >-
      {{ .ProjectName }}_
      {{- .Version }}_
      {{- .Os }}_
      {{- .Arch }}
    format_overrides:
      - goos: windows
        formats:
          - zip
    files:
      - README*
      - PLAN_TO_MAKE_SLB.md

checksum:
  name_template: "checksums.txt"
  algorithm: sha256

sboms:
  - artifacts: archive
    cmd: syft
    args: ["$artifact", "--output", "spdx-json=$document"]

signs:
  - cmd: cosign
    env:
      - COSIGN_EXPERIMENTAL=1
    certificate: "${artifact}.pem"
    args:
      - sign-blob
      - "--output-certificate=${certificate}"
      - "--output-signature=${signature}"
      - "${artifact}"
      - "--yes"
    artifacts: checksum
    output: true

snapshot:
  version_template: "{{ incpatch .Version }}-next"

changelog:
  sort: asc
  filters:
    exclude:
      - "^docs:"
      - "^test:"
      - "^ci:"
      - "^chore:"
      - Merge pull request
      - Merge branch

release:
  github:
    owner: Dicklesworthstone
    name: slb
  draft: false
  prerelease: auto
  name_template: "v{{.Version}}"

homebrew_casks:
  - name: slb
    binaries:
      - slb
    repository:
      owner: Dicklesworthstone
      name: homebrew-tap
      branch: main
      token: "{{ .Env.HOMEBREW_TAP_GITHUB_TOKEN }}"
    directory: Casks
    homepage: https://github.com/Dicklesworthstone/slb
    description: "Simultaneous Launch Button - Two-person rule for dangerous commands"
    caveats: |
      SLB (Simultaneous Launch Button) implements two-person authorization.

      Quick start:
        slb init                  # Initialize in current project
        slb create "rm -rf /"     # Create a launch request
        slb list                  # List pending requests

# Scoop bucket publishing
scoops:
  - name: slb
    repository:
      owner: Dicklesworthstone
      name: scoop-bucket
      branch: main
      token: "{{ .Env.HOMEBREW_TAP_GITHUB_TOKEN }}"
    homepage: https://github.com/Dicklesworthstone/slb
    description: "Simultaneous Launch Button - Two-person rule for dangerous commands"
    license: MIT

nfpms:
  - id: default
    package_name: slb
    file_name_template: "{{ .ProjectName }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}"
    vendor: Dicklesworthstone
    homepage: https://github.com/Dicklesworthstone/slb
    maintainer: Dicklesworthstone
    description: "Simultaneous Launch Button - Two-person rule for dangerous commands"
    license: MIT
    formats:
      - deb
      - rpm
      - apk
    bindir: /usr/bin

announce:
  skip: true