github.com/lineaje-labs/syft@v0.98.1-0.20231227153149-9e393f60ff1b/.goreleaser.yaml (about) 1 release: 2 prerelease: auto 3 draft: false 4 5 env: 6 # required to support multi architecture docker builds 7 - DOCKER_CLI_EXPERIMENTAL=enabled 8 - CGO_ENABLED=0 9 10 builds: 11 - id: linux-build 12 dir: ./cmd/syft 13 binary: syft 14 goos: 15 - linux 16 goarch: 17 - amd64 18 - arm64 19 - ppc64le 20 - s390x 21 # set the modified timestamp on the output binary to the git timestamp to ensure a reproducible build 22 mod_timestamp: &build-timestamp '{{ .CommitTimestamp }}' 23 ldflags: &build-ldflags | 24 -w 25 -s 26 -extldflags '-static' 27 -X main.version={{.Version}} 28 -X main.gitCommit={{.Commit}} 29 -X main.buildDate={{.Date}} 30 -X main.gitDescription={{.Summary}} 31 32 - id: darwin-build 33 dir: ./cmd/syft 34 binary: syft 35 goos: 36 - darwin 37 goarch: 38 - amd64 39 - arm64 40 mod_timestamp: *build-timestamp 41 ldflags: *build-ldflags 42 43 - id: windows-build 44 dir: ./cmd/syft 45 binary: syft 46 goos: 47 - windows 48 goarch: 49 - amd64 50 mod_timestamp: *build-timestamp 51 ldflags: *build-ldflags 52 53 archives: 54 - id: linux-archives 55 builds: 56 - linux-build 57 58 # note: the signing process is depending on tar.gz archives. If this format changes then .github/scripts/apple-signing/*.sh will need to be adjusted 59 - id: darwin-archives 60 builds: 61 - darwin-build 62 63 - id: windows-archives 64 format: zip 65 builds: 66 - windows-build 67 68 nfpms: 69 - license: "Apache 2.0" 70 maintainer: "Anchore, Inc" 71 homepage: &website "https://github.com/anchore/syft" 72 description: &description "A tool that generates a Software Bill Of Materials (SBOM) from container images and filesystems" 73 formats: 74 - rpm 75 - deb 76