diff options
| author | Mohammed Al Sahaf <msaa1990@gmail.com> | 2022-09-03 03:37:10 +0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-09-03 03:37:10 +0300 |
| commit | d6b3c7d2623d9a809abda367fb93dc48b0ba7d7c (patch) | |
| tree | cfd539965a6780920d385b9567067252b494988e /.goreleaser.yml | |
| parent | 66476d8c8f6010f19fb65bac7758c6fd2824e231 (diff) | |
ci: generate SBOM and sign artifacts using cosign (#4910)
* ci: sign artifacts using cosign
* include SBOM
Diffstat (limited to '.goreleaser.yml')
| -rw-r--r-- | .goreleaser.yml | 11 |
1 files changed, 10 insertions, 1 deletions
diff --git a/.goreleaser.yml b/.goreleaser.yml index f0e2615..d4f786d 100644 --- a/.goreleaser.yml +++ b/.goreleaser.yml @@ -62,9 +62,18 @@ builds: goarm: "5" flags: - -trimpath + - -mod=readonly ldflags: - -s -w - +signs: + - cmd: cosign + signature: "${artifact}.sig" + args: ["sign-blob", "--oidc-issuer=https://token.actions.githubusercontent.com", "--output=${signature}", "${artifact}"] + artifacts: all +sboms: + - artifacts: binary + cmd: syft + args: ["$artifact", "--file", "$sbom", "--output", "cyclonedx-json"] archives: - format_overrides: - goos: windows |