goreleaser.yml

# Copyright 2021 ZUP IT SERVICOS EM TECNOLOGIA E INOVACAO SA
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

project_name: horusec

builds:
  - id: horusec
    env: [ CGO_ENABLED=0 ]
    main: ./cmd/app/main.go
    ldflags:
      - -X 'github.com/ZupIT/horusec/cmd/app/version.Version={{ .Env.CLI_VERSION }}'
      - -X 'github.com/ZupIT/horusec/cmd/app/version.Commit={{ .Commit }}'
      - -X 'github.com/ZupIT/horusec/cmd/app/version.Date={{ .Env.CURRENT_DATE }}'
      - -s -w
    goos:
      - linux
      - windows
      - darwin
    goarch:
      - amd64
      - arm64
      - 386
    binary: horusec_{{ replace (replace .Os "windows" "win") "darwin" "mac" }}_{{ replace .Arch "386" "x86" }}
  - id: horusec-standalone
    env: [ CGO_ENABLED=0 ]
    main: ./cmd/app/main.go
    ldflags:
      - -X 'github.com/ZupIT/horusec/cmd/app/version.Version={{ .Env.CLI_VERSION }}'
      - -X 'github.com/ZupIT/horusec/cmd/app/version.Commit={{ .Commit }}'
      - -X 'github.com/ZupIT/horusec/cmd/app/version.Date={{ .Env.CURRENT_DATE }}'
      - -X 'github.com/ZupIT/horusec/config/dist.standAlone=true'
      - -s -w
    goos:
      - linux
      - windows
      - darwin
    goarch:
      - amd64
      - arm64
      - 386
    binary: horusec_{{ replace (replace .Os "windows" "win") "darwin" "mac" }}_{{ replace .Arch "386" "x86" }}_stand_alone
changelog:
  skip: true
snapshot:
  name_template: '{{ incpatch .Tag }}'
archives:
  - id: horusec
    builds:
      - horusec
    name_template: "{{ .ProjectName }}_{{ .Os }}_{{ .Arch }}"
    format: binary
    replacements:
      amd64: amd64
      386: x86
      arm64: arm64
      darwin: mac
      windows: win
  - id: horusec-standalone
    builds:
      - horusec-standalone
    name_template: "{{ .ProjectName }}_{{ .Os }}_{{ .Arch }}_stand_alone"
    format: binary
    replacements:
      amd64: amd64
      386: x86
      arm64: arm64
      darwin: mac
      windows: win
checksum:
  name_template: 'checksums.txt'
release:
  draft: true
  extra_files:
    - glob: deployments/cosign.pub
nfpms:
  - id: horusec
    package_name: horusec
    file_name_template: "{{ .ProjectName }}_{{ .Os }}_{{ .Arch }}"
    builds:
      - horusec
    replacements:
      amd64: amd64
      386: x86
      arm64: arm64
      darwin: mac
      windows: win
    homepage: https://horusec.io/
    maintainer: ZupIT <horusec@zup.com.br>
    description: Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.
    license: Apache 2.0
    formats:
      - deb
      - rpm
    suggests:
      - git
      - docker
    bindir: /usr/local/bin
    priority: extra
signs:
  - cmd: cosign
    stdin: '{{ .Env.COSIGN_PWD }}'
    args: [ "sign-blob", "-key={{ .Env.COSIGN_KEY_LOCATION }}", "-output=${signature}", "${artifact}" ]
    artifacts: all
docker_signs:
  - cmd: cosign
    args: [ "sign", "-key={{ .Env.COSIGN_KEY_LOCATION }}", "${artifact}" ]
    artifacts: all
    stdin: '{{ .Env.COSIGN_PWD }}'
dockers:
  - image_templates:
      - 'horuszup/horusec-cli:{{ .Tag }}-amd64'
    skip_push: false
    goos: linux
    goarch: amd64
    dockerfile: ./deployments/Dockerfile-gorelease-amd64
    use: docker
    build_flag_templates:
      - "--pull"
      - "--label=org.opencontainers.image.created={{.Date}}"
      - "--label=org.opencontainers.image.title={{.ProjectName}}"
      - "--label=org.opencontainers.image.revision={{.FullCommit}}"
      - "--label=org.opencontainers.image.version={{.Version}}"
      - "--platform=linux/amd64"
    push_flags:
      - --tls-verify=false
  - image_templates:
      - 'horuszup/horusec-cli:{{ .Tag }}-arm64'
    skip_push: false
    goos: linux
    goarch: arm64
    dockerfile: ./deployments/Dockerfile-gorelease-arm64
    use: docker
    build_flag_templates:
      - "--pull"
      - "--label=org.opencontainers.image.created={{.Date}}"
      - "--label=org.opencontainers.image.title={{.ProjectName}}"
      - "--label=org.opencontainers.image.revision={{.FullCommit}}"
      - "--label=org.opencontainers.image.version={{.Version}}"
      - "--platform=linux/arm64"
    push_flags:
      - --tls-verify=false
docker_manifests:

  - name_template: 'horuszup/horusec-cli:{{ .Tag }}'
    image_templates:
      - 'horuszup/horusec-cli:{{ .Tag }}-amd64'
      - 'horuszup/horusec-cli:{{ .Tag }}-arm64'
  - name_template: 'horuszup/horusec-cli:latest'
    image_templates:
      - 'horuszup/horusec-cli:{{ .Tag }}-amd64'
      - 'horuszup/horusec-cli:{{ .Tag }}-arm64'
    skip_push: auto
  - name_template: 'horuszup/horusec-cli:v{{ .Major }}'
    image_templates:
      - 'horuszup/horusec-cli:{{ .Tag }}-amd64'
      - 'horuszup/horusec-cli:{{ .Tag }}-arm64'
    skip_push: auto
  - name_template: 'horuszup/horusec-cli:v{{ .Major }}.{{ .Minor }}'
    image_templates:
      - 'horuszup/horusec-cli:{{ .Tag }}-amd64'
      - 'horuszup/horusec-cli:{{ .Tag }}-arm64'
    skip_push: auto