mirror of
https://github.com/anchore/grype
synced 2024-11-10 14:44:12 +00:00
90 lines
2.3 KiB
YAML
90 lines
2.3 KiB
YAML
release:
|
|
prerelease: auto
|
|
draft: false
|
|
|
|
before:
|
|
hooks:
|
|
- ./.github/scripts/apple-signing/setup.sh {{ .IsSnapshot }}
|
|
|
|
builds:
|
|
- id: linux-build
|
|
binary: grype
|
|
goos:
|
|
- linux
|
|
goarch:
|
|
- amd64
|
|
- arm64
|
|
- s390x
|
|
# set the modified timestamp on the output binary to the git timestamp to ensure a reproducible build
|
|
mod_timestamp: &build-timestamp '{{ .CommitTimestamp }}'
|
|
env: &build-env
|
|
- CGO_ENABLED=0
|
|
ldflags: &build-ldflags |
|
|
-w
|
|
-s
|
|
-extldflags '-static'
|
|
-X github.com/anchore/grype/internal/version.version={{.Version}}
|
|
-X github.com/anchore/grype/internal/version.syftVersion={{.Env.SYFT_VERSION}}
|
|
-X github.com/anchore/grype/internal/version.gitCommit={{.Commit}}
|
|
-X github.com/anchore/grype/internal/version.buildDate={{.Date}}
|
|
-X github.com/anchore/grype/internal/version.gitDescription={{.Summary}}
|
|
|
|
- id: darwin-build
|
|
binary: grype
|
|
goos:
|
|
- darwin
|
|
goarch:
|
|
- amd64
|
|
- arm64
|
|
mod_timestamp: *build-timestamp
|
|
env: *build-env
|
|
ldflags: *build-ldflags
|
|
hooks:
|
|
post:
|
|
# we must have signing as a build hook instead of the signs section. The signs section must register a new asset, where we want to replace an existing asset.
|
|
# a post-build hook has the advantage of not needing to unpackage and repackage a tar.gz with a signed binary
|
|
- ./.github/scripts/apple-signing/sign.sh "{{ .Path }}" "{{ .IsSnapshot }}" "{{ .Target }}"
|
|
|
|
- id: windows-build
|
|
binary: grype
|
|
goos:
|
|
- windows
|
|
goarch:
|
|
- amd64
|
|
mod_timestamp: *build-timestamp
|
|
env: *build-env
|
|
ldflags: *build-ldflags
|
|
|
|
archives:
|
|
- id: linux-archives
|
|
builds:
|
|
- linux-build
|
|
|
|
- id: darwin-archives
|
|
builds:
|
|
- darwin-build
|
|
|
|
- id: windows-archives
|
|
format: zip
|
|
builds:
|
|
- windows-build
|
|
|
|
nfpms:
|
|
- license: "Apache 2.0"
|
|
maintainer: "Anchore, Inc"
|
|
homepage: &website "https://github.com/anchore/grype"
|
|
description: &description "A vulnerability scanner for container images and filesystems"
|
|
formats:
|
|
- rpm
|
|
- deb
|
|
|
|
brews:
|
|
- tap:
|
|
owner: anchore
|
|
name: homebrew-grype
|
|
ids:
|
|
- darwin-archives
|
|
- linux-archives
|
|
homepage: *website
|
|
description: *description
|
|
license: "Apache License 2.0"
|