.goreleaser.yml

before:
  hooks:
  - ./bin/go_mod_tidy # Get dependencies

project_name: secretless-broker

builds:
- &summon-2-build
  id: summon2-linux
  main: ./cmd/summon2/main.go
  binary: summon2
  env:
  - CGO_ENABLED=1
  # Tag 'netgo' is a Go build tag that ensures a pure Go networking stack
  # in the resulting binary instead of using the default host's stack to
  # ensure a fully statically-linked artifact that has no lib dependencies.
  flags:
  - -tags=netgo
  goos:
  - linux
  goarch:
  - amd64
  # These flags generate a statically-linked artifact that allows the binary
  # to run on any linux-based OS.
  ldflags: -s -w -linkmode external -extldflags "-static"

- <<: *summon-2-build
  id: summon2-darwin-amd64
  env:
  - CGO_ENABLED=1
  - CC=o64-clang
  - CXX=o64-clang++
  goos:
  - darwin
  goarch:
  - amd64
  # Building for OSX with -extldflags "-static" results in the error:
  # ld: library not found for -lcrt0.o
  # This is because static builds are only possible if all libraries
  # (including libgcc.a) have also been compiled with -static.
  # A static version of crt0.o is not provided
  # with the OSX SDK
  ldflags: -s -w -linkmode external

- <<: *summon-2-build
  id: summon2-darwin-arm64
  env:
  - CGO_ENABLED=1
  - CC=oa64-clang
  - CXX=oa64-clang++
  goos:
  - darwin
  goarch:
  - arm64
  # Building for OSX with -extldflags "-static" results in the error:
  # ld: library not found for -lcrt0.o
  # This is because static builds are only possible if all libraries
  # (including libgcc.a) have also been compiled with -static.
  # A static version of crt0.o is not provided
  # with the OSX SDK
  ldflags: -s -w -linkmode external


- &secretless-broker-build
  id: secretless-broker-linux
  main: ./cmd/secretless-broker/main.go
  binary: secretless-broker
  env:
  - CGO_ENABLED=1
  # Tag 'netgo' is a Go build tag that ensures a pure Go networking stack
  # in the resulting binary instead of using the default host's stack to
  # ensure a fully static artifact that has no dependencies.
  flags:
  - -tags=netgo
  goos:
  - linux
  goarch:
  - amd64
  # The `Tag` override is there to provide the git commit information in the
  # final binary. See `Static long version tags` in the `Building` section
  # of `CONTRIBUTING.md` for more information.
  ldflags: -s -w -linkmode external -X "github.com/cyberark/secretless-broker/pkg/secretless.Tag={{ .ShortCommit }}" -extldflags "-static"
  hooks:
    post:
      # Copy the binary out into the <dist> path, and give the copy the name we want
      # in the release <extra_files>.
      # e.g. Suppose a windows amd64 build generates a binary at
      # path/to/secretless-broker.exe. This will be copied to
      # path/to/../secretless-broker-windows_amd64.exe. The copy path can then be added to
      # the release <extra_files> and will result in a release artifact with the name
      # secretless-broker-windows_amd64.exe.
      - cp "{{ .Path }}" "{{ dir .Path }}/../secretless-broker-{{.Target}}{{.Ext}}"

- <<: *secretless-broker-build
  id: secretless-broker-darwin
  env:
  - CGO_ENABLED=1
  - CC=o64-clang
  - CXX=o64-clang++
  goos:
  - darwin
  goarch:
  - amd64
  # Building for OSX with -extldflags "-static" results in the error:
  # ld: library not found for -lcrt0.o
  # This is because static builds are only possible if all libraries
  # (including libgcc.a) have also been compiled with -static.
  # A static version of crt0.o is not provided
  # with the OSX SDK
  ldflags: -s -w -linkmode external -X "github.com/cyberark/secretless-broker/pkg/secretless.Tag={{ .ShortCommit }}"

- <<: *secretless-broker-build
  # Apple silicon support
  id: secretless-broker-arm
  env:
  - CGO_ENABLED=1
  - CC=oa64-clang
  - CXX=oa64-clang++
  flags:
  - -tags=netgo
  goos:
  - darwin
  goarch:
  - arm64
  # Building for OSX with -extldflags "-static" results in the error:
  # ld: library not found for -lcrt0.o
  # This is because static builds are only possible if all libraries
  # (including libgcc.a) have also been compiled with -static.
  # A static version of crt0.o is not provided
  # with the OSX SDK
  ldflags: -s -w -linkmode external -X "github.com/cyberark/secretless-broker/pkg/secretless.Tag={{ .ShortCommit }}"

archives:
  - id: secretless-release-archive
    files:
      - CHANGELOG.md
      - NOTICES.txt
      - LICENSE
      - README.md
    format_overrides:
      - goos: windows
        format: zip
    name_template: "{{.ProjectName}}_{{.Env.VERSION}}_{{.Os}}_{{.Arch}}"
    wrap_in_directory: true

checksum:
  name_template: 'SHA256SUMS.txt'

dist: ./dist/goreleaser

brews:
  - description: Secures your apps by making them Secretless
    homepage: https://secretless.io
    url_template: https://github.com/cyberark/secretless-broker/releases/download/v{{.Env.VERSION}}/secretless-broker_{{.Env.VERSION}}_{{.Os}}_{{.Arch}}.tar.gz
    install: |
      bin.install "secretless-broker"
    test: |
      system "#{bin}/secretless-broker", "-version"
    tap:
      owner: cyberark
      name: homebrew-tools
    skip_upload: true

nfpms:
  - bindir: /usr/bin
    description: Secures your apps by making them Secretless
    contents:
    - dst: /usr/local/lib/secretless
      type: dir
    formats:
    - deb
    - rpm
    homepage: https://secretless.io
    license: "Apache 2.0"
    maintainer: CyberArk Maintainers <conj_maintainers@cyberark.com>
    file_name_template: "{{.ProjectName}}_{{.Env.VERSION}}_{{.Arch}}"
    vendor: CyberArk

snapshot:
  name_template: "{{ .Tag }}-next"

release:
  disable: true #Goreleaser releasing is disabled to allow the automated release process to handle Github releases
  draft: true
  extra_files:
    - glob: NOTICES.txt
    - glob: LICENSE
    - glob: CHANGELOG.md
    - glob: dist/goreleaser/secretless-broker-linux_amd64
    - glob: dist/goreleaser/secretless-broker-darwin_amd64
    - glob: dist/goreleaser/secretless-broker-darwin_arm64