goreleaser.yml

# Copyright 2021 ZUP IT SERVICOS EM TECNOLOGIA E INOVACAO SA
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

project_name: horusec

builds:
  - id: horusec
    env: [ CGO_ENABLED=0 ]
    main: ./cmd/app/main.go
    ldflags:
      - -X 'github.com/ZupIT/horusec/cmd/app/version.Version={{ .Env.CLI_VERSION }}'
      - -X 'github.com/ZupIT/horusec/cmd/app/version.Commit={{ .Commit }}'
      - -X 'github.com/ZupIT/horusec/cmd/app/version.Date={{ .Env.CURRENT_DATE }}'
      - -s -w
    goos:
      - linux
      - windows
      - darwin
    goarch:
      - amd64
      - arm64
      - "386"
    binary: horusec_{{ replace (replace .Os "windows" "win") "darwin" "mac" }}_{{ replace .Arch "386" "x86" }}
  - id: horusec-standalone
    env: [ CGO_ENABLED=0 ]
    main: ./cmd/app/main.go
    ldflags:
      - -X 'github.com/ZupIT/horusec/cmd/app/version.Version={{ .Env.CLI_VERSION }}'
      - -X 'github.com/ZupIT/horusec/cmd/app/version.Commit={{ .Commit }}'
      - -X 'github.com/ZupIT/horusec/cmd/app/version.Date={{ .Env.CURRENT_DATE }}'
      - -X 'github.com/ZupIT/horusec/config/dist.standAlone=true'
      - -s -w
    goos:
      - linux
      - windows
      - darwin
    goarch:
      - amd64
      - arm64
      - "386"
    binary: horusec_{{ replace (replace .Os "windows" "win") "darwin" "mac" }}_{{ replace .Arch "386" "x86" }}_stand_alone
changelog:
  skip: false
  use: github
  groups:
  - title: 'Features'
    regexp: "^.*:(feature|feat)\\s-.*$"
    order: 0
  - title: 'Bug fixes'
    regexp: "^.*:(bugfix|fix)\\s-.*$"
    order: 1
  - title: 'Hotfixes'
    regexp: "^.*:hotfix\\s-.*$"
    order: 2
  - title: 'Chores'
    regexp: "^.*:chore\\s-.*$"
    order: 3
  - title: Others
    order: 999
  filters:
    exclude:
      - '^deps:chore.*$'
      - '^build(deps):.*$'
snapshot:
  name_template: '{{ incpatch .Tag }}'
archives:
  - id: horusec
    builds:
      - horusec
    name_template: horusec_{{ replace (replace .Os "Windows" "win") "darwin" "mac" }}_{{ replace .Arch "386" "x86" }}
    format: binary
  - id: horusec-standalone
    builds:
      - horusec-standalone
    name_template: horusec_{{ replace (replace .Os "Windows" "win") "darwin" "mac" }}_{{ replace .Arch "386" "x86" }}_stand_alone
    format: binary
checksum:
  name_template: 'checksums.txt'
release:
  draft: false
  prerelease: auto
  mode: append
  footer: |
    ## Docker images
    - `docker pull horuszup/horusec-cli:{{ .Tag }}`

    **Full Changelog**: https://github.com/ZupIT/horusec/compare/{{ .PreviousTag }}...{{ .Tag }}
  extra_files:
    - glob: deployments/cosign.pub
nfpms:
  - id: horusec
    package_name: horusec
    file_name_template: horusec_{{ replace (replace .Os "Windows" "win") "darwin" "mac" }}_{{ replace .Arch "386" "x86" }}
    builds:
      - horusec
    homepage: https://horusec.io/
    maintainer: ZupIT <horusec@zup.com.br>
    description: Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.
    license: Apache 2.0
    formats:
      - deb
      - rpm
    suggests:
      - git
      - docker
    bindir: /usr/local/bin
    priority: extra
signs:
  - cmd: cosign
    stdin: '{{ .Env.COSIGN_PWD }}'
    args: [ "sign-blob", "-key={{ .Env.COSIGN_KEY_LOCATION }}", "-output=${signature}", "${artifact}" ]
    artifacts: all
docker_signs:
  - cmd: cosign
    args: [ "sign", "-key={{ .Env.COSIGN_KEY_LOCATION }}", "${artifact}" ]
    artifacts: all
    stdin: '{{ .Env.COSIGN_PWD }}'
dockers:
  - image_templates:
      - 'horuszup/horusec-cli:{{ .Tag }}-amd64'
    skip_push: "false"
    goos: linux
    goarch: amd64
    dockerfile: ./deployments/Dockerfile-gorelease-amd64
    use: docker
    build_flag_templates:
      - "--pull"
      - "--label=org.opencontainers.image.created={{.Date}}"
      - "--label=org.opencontainers.image.title={{.ProjectName}}"
      - "--label=org.opencontainers.image.revision={{.FullCommit}}"
      - "--label=org.opencontainers.image.version={{.Version}}"
      - "--platform=linux/amd64"
    push_flags:
      - --tls-verify=false
  - image_templates:
      - 'horuszup/horusec-cli:{{ .Tag }}-arm64'
    skip_push: "false"
    goos: linux
    goarch: arm64
    dockerfile: ./deployments/Dockerfile-gorelease-arm64
    use: docker
    build_flag_templates:
      - "--pull"
      - "--label=org.opencontainers.image.created={{.Date}}"
      - "--label=org.opencontainers.image.title={{.ProjectName}}"
      - "--label=org.opencontainers.image.revision={{.FullCommit}}"
      - "--label=org.opencontainers.image.version={{.Version}}"
      - "--platform=linux/arm64"
    push_flags:
      - --tls-verify=false
docker_manifests:

  - name_template: 'horuszup/horusec-cli:{{ .Tag }}'
    image_templates:
      - 'horuszup/horusec-cli:{{ .Tag }}-amd64'
      - 'horuszup/horusec-cli:{{ .Tag }}-arm64'
  - name_template: 'horuszup/horusec-cli:latest'
    image_templates:
      - 'horuszup/horusec-cli:{{ .Tag }}-amd64'
      - 'horuszup/horusec-cli:{{ .Tag }}-arm64'
    skip_push: auto
  - name_template: 'horuszup/horusec-cli:v{{ .Major }}'
    image_templates:
      - 'horuszup/horusec-cli:{{ .Tag }}-amd64'
      - 'horuszup/horusec-cli:{{ .Tag }}-arm64'
    skip_push: auto
  - name_template: 'horuszup/horusec-cli:v{{ .Major }}.{{ .Minor }}'
    image_templates:
      - 'horuszup/horusec-cli:{{ .Tag }}-amd64'
      - 'horuszup/horusec-cli:{{ .Tag }}-arm64'
    skip_push: auto