.goreleaser.yml

project_name: vulnerability-operator
before:
  hooks:
    - go mod tidy
builds:
  - env:
      - CGO_ENABLED=0
    goos:
      - linux
    goarm:
      - "6"
      - "7"
    goarch:
      - "amd64"
      - "arm64"
    ignore:
      - goos: linux
        goarch: "386"
    ldflags:
      - -s -w -X main.Version={{.Version}} -X main.Commit={{.Commit}} -X main.Date={{.CommitDate}} -X main.BuiltBy=goreleaser
    mod_timestamp: "{{.CommitTimestamp}}"
    flags:
      - -trimpath

sboms:
  - artifacts: archive
    args: ["$artifact", "--file", "$document", "--output", "json"]

snapshot:
  name_template: "{{ .Version }}"

release:
  disable: true

changelog:
  disable: true

source:
  enabled: true

signs:
  - cmd: cosign
    certificate: '${artifact}.pem'
    args:
      - sign-blob
      - '-y'
      - '--output-certificate=${certificate}'
      - '--output-signature=${signature}'
      - '${artifact}'
    artifacts: all
    output: true