github.com/anchore/syft@v1.38.2/.binny.yaml (about)

     1  tools:
     2    # we want to use a pinned version of binny to manage the toolchain (so binny manages itself!)
     3    - name: binny
     4      version:
     5        want: v0.10.0
     6      method: github-release
     7      with:
     8        repo: anchore/binny
     9  
    10    # used to produce SBOMs during release
    11    - name: syft
    12      version:
    13        want: latest
    14      method: github-release
    15      with:
    16        repo: anchore/syft
    17  
    18    # used to sign mac binaries at release
    19    - name: quill
    20      version:
    21        want: v0.5.1
    22      method: github-release
    23      with:
    24        repo: anchore/quill
    25  
    26    # used for linting
    27    - name: golangci-lint
    28      version:
    29        want: v2.7.2
    30      method: github-release
    31      with:
    32        repo: golangci/golangci-lint
    33  
    34    # used for showing the changelog at release
    35    - name: glow
    36      version:
    37        want: v2.1.1
    38      method: github-release
    39      with:
    40        repo: charmbracelet/glow
    41  
    42    # used for signing the checksums file at release
    43    - name: cosign
    44      version:
    45        want: v3.0.2
    46      method: github-release
    47      with:
    48        repo: sigstore/cosign
    49  
    50    # used in integration tests to verify JSON schemas
    51    - name: yajsv
    52      version:
    53        want: v1.4.1
    54      method: github-release
    55      with:
    56        repo: neilpa/yajsv
    57  
    58    # used to release all artifacts
    59    - name: goreleaser
    60      version:
    61        want: v2.13.1
    62      method: github-release
    63      with:
    64        repo: goreleaser/goreleaser
    65  
    66    # used for organizing imports during static analysis
    67    - name: gosimports
    68      version:
    69        want: v0.3.8
    70      method: github-release
    71      with:
    72        repo: rinchsan/gosimports
    73  
    74    # used at release to generate the changelog
    75    - name: chronicle
    76      version:
    77        want: v0.8.0
    78      method: github-release
    79      with:
    80        repo: anchore/chronicle
    81  
    82    # used during static analysis for license compliance
    83    - name: bouncer
    84      version:
    85        want: v0.4.0
    86      method: github-release
    87      with:
    88        repo: wagoodman/go-bouncer
    89  
    90    # used for running all local and CI tasks
    91    - name: task
    92      version:
    93        want: v3.45.5
    94      method: github-release
    95      with:
    96        repo: go-task/task
    97  
    98    # used for triggering a release
    99    - name: gh
   100      version:
   101        want: v2.83.1
   102      method: github-release
   103      with:
   104        repo: cli/cli
   105  
   106    # used to upload test fixture cache
   107    - name: oras
   108      version:
   109        want: v1.3.0
   110      method: github-release
   111      with:
   112        repo: oras-project/oras
   113  
   114    # used to upload test fixture cache
   115    - name: yq
   116      version:
   117        want: v4.49.2
   118      method: github-release
   119      with:
   120        repo: mikefarah/yq