.goreleaser.yml

checksum:
  name_template: 'checksums.txt'
changelog:
  sort: asc
  filters:
    exclude:
    - '^docs:'
    - '^test:'
builds:
  - id: polaris
    ldflags:
      - -X main.Version={{.Version}} -X main.Commit={{.Commit}} -s -w
    env:
      - CGO_ENABLED=0
      - GO111MODULE=on
    goos:
      - linux
      - darwin
      - windows
    goarch:
      - amd64
      - arm
      - arm64
    goarm:
      - 6
      - 7
archives:
  - id: polaris
    builds: ["polaris"]
    name_template: "{{ .ProjectName }}_{{ .Os }}_{{ .Arch }}{{ if .Arm }}v{{ .Arm }}{{ end }}{{ if .Mips }}_{{ .Mips }}{{ end }}"
signs:
- cmd: cosign
  args: ["sign-blob", "--key=hashivault://cosign", "-output-signature=${signature}", "${artifact}"]
  artifacts: checksum
release:
  prerelease: auto
  footer: |
    You can verify the signature of the checksums.txt file using [cosign](https://github.com/sigstore/cosign).

    ```
    cosign verify-blob checksums.txt --signature=checksums.txt.sig  --key https://artifacts.fairwinds.com/cosign.pub
    ```
brews:
  - name: polaris
    tap:
      owner: FairwindsOps
      name: homebrew-tap
    folder: Formula
    description: Open Source Best Practices for Kubernetes
    test: |
      system "#{bin}/polaris version"