github.com/lineaje-labs/syft@v0.98.1-0.20231227153149-9e393f60ff1b/.goreleaser.yaml (about)

     1  release:
     2    prerelease: auto
     3    draft: false
     4  
     5  env:
     6    # required to support multi architecture docker builds
     7    - DOCKER_CLI_EXPERIMENTAL=enabled
     8    - CGO_ENABLED=0
     9  
    10  builds:
    11    - id: linux-build
    12      dir: ./cmd/syft
    13      binary: syft
    14      goos:
    15        - linux
    16      goarch:
    17        - amd64
    18        - arm64
    19        - ppc64le
    20        - s390x
    21      # set the modified timestamp on the output binary to the git timestamp to ensure a reproducible build
    22      mod_timestamp: &build-timestamp '{{ .CommitTimestamp }}'
    23      ldflags: &build-ldflags |
    24        -w
    25        -s
    26        -extldflags '-static'
    27        -X main.version={{.Version}}
    28        -X main.gitCommit={{.Commit}}
    29        -X main.buildDate={{.Date}}
    30        -X main.gitDescription={{.Summary}}
    31  
    32    - id: darwin-build
    33      dir: ./cmd/syft
    34      binary: syft
    35      goos:
    36        - darwin
    37      goarch:
    38        - amd64
    39        - arm64
    40      mod_timestamp: *build-timestamp
    41      ldflags: *build-ldflags
    42  
    43    - id: windows-build
    44      dir: ./cmd/syft
    45      binary: syft
    46      goos:
    47        - windows
    48      goarch:
    49        - amd64
    50      mod_timestamp: *build-timestamp
    51      ldflags: *build-ldflags
    52  
    53  archives:
    54    - id: linux-archives
    55      builds:
    56        - linux-build
    57  
    58    # note: the signing process is depending on tar.gz archives. If this format changes then .github/scripts/apple-signing/*.sh will need to be adjusted
    59    - id: darwin-archives
    60      builds:
    61        - darwin-build
    62  
    63    - id: windows-archives
    64      format: zip
    65      builds:
    66        - windows-build
    67  
    68  nfpms:
    69    - license: "Apache 2.0"
    70      maintainer: "Anchore, Inc"
    71      homepage: &website "https://github.com/anchore/syft"
    72      description: &description "A tool that generates a Software Bill Of Materials (SBOM) from container images and filesystems"
    73      formats:
    74        - rpm
    75        - deb
    76