diff options
Diffstat (limited to '.goreleaser.yml')
| -rw-r--r-- | .goreleaser.yml | 11 |
1 files changed, 10 insertions, 1 deletions
diff --git a/.goreleaser.yml b/.goreleaser.yml index f0e2615..d4f786d 100644 --- a/.goreleaser.yml +++ b/.goreleaser.yml @@ -62,9 +62,18 @@ builds: goarm: "5" flags: - -trimpath + - -mod=readonly ldflags: - -s -w - +signs: + - cmd: cosign + signature: "${artifact}.sig" + args: ["sign-blob", "--oidc-issuer=https://token.actions.githubusercontent.com", "--output=${signature}", "${artifact}"] + artifacts: all +sboms: + - artifacts: binary + cmd: syft + args: ["$artifact", "--file", "$sbom", "--output", "cyclonedx-json"] archives: - format_overrides: - goos: windows |