panda/.goreleaser.yaml at master · ethpandaops/panda · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
version: 2

snapshot:
  version_template: "{{ .Tag }}-SNAPSHOT-{{ .ShortCommit }}"

builds:
  - id: panda-server
    main: ./cmd/server
    binary: panda-server
    env:
      - CGO_ENABLED=0
    goos:
      - linux
    goarch:
      - amd64
      - arm64
    ldflags:
      - -s -w
      - -X github.com/ethpandaops/panda/internal/version.Version={{.Version}}
      - -X github.com/ethpandaops/panda/internal/version.GitCommit={{.Commit}}
      - -X github.com/ethpandaops/panda/internal/version.BuildTime={{.Date}}

  - id: panda
    main: ./cmd/panda
    binary: panda
    env:
      - CGO_ENABLED=0
    goos:
      - linux
      - darwin
    goarch:
      - amd64
      - arm64
    ldflags:
      - -s -w
      - -X github.com/ethpandaops/panda/internal/version.Version={{.Version}}
      - -X github.com/ethpandaops/panda/internal/version.GitCommit={{.Commit}}
      - -X github.com/ethpandaops/panda/internal/version.BuildTime={{.Date}}

  - id: panda-proxy
    main: ./cmd/proxy
    binary: panda-proxy
    env:
      - CGO_ENABLED=0
    goos:
      - linux
    goarch:
      - amd64
      - arm64
    ldflags:
      - -s -w
      - -X github.com/ethpandaops/panda/internal/version.Version={{.Version}}
      - -X github.com/ethpandaops/panda/internal/version.GitCommit={{.Commit}}
      - -X github.com/ethpandaops/panda/internal/version.BuildTime={{.Date}}

archives:
  - id: panda-server
    ids:
      - panda-server
    name_template: "panda-server_{{ .Version }}_{{ .Os }}_{{ .Arch }}"

  - id: panda
    ids:
      - panda
    name_template: "panda_{{ .Version }}_{{ .Os }}_{{ .Arch }}"

  - id: panda-proxy
    ids:
      - panda-proxy
    name_template: "panda-proxy_{{ .Version }}_{{ .Os }}_{{ .Arch }}"

dockers_v2:
  # Server
  - id: server
    ids:
      - panda-server
    dockerfile: goreleaser.server.Dockerfile
    extra_files:
      - docker-entrypoint.sh
    images:
      - "ethpandaops/panda"
    tags:
      - "server-{{ .Version }}"
      - "server-{{ .Version }}-{{ .ShortCommit }}"
      - "server-{{ .Env.LATEST_TAG }}"
    platforms:
      - linux/amd64
      - linux/arm64

  # CLI (panda) — unprefixed, CLI is the default
  - id: panda
    ids:
      - panda
    dockerfile: goreleaser.panda.Dockerfile
    images:
      - "ethpandaops/panda"
    tags:
      - "{{ .Version }}"
      - "{{ .Version }}-{{ .ShortCommit }}"
      - "{{ .Env.LATEST_TAG }}"
    platforms:
      - linux/amd64
      - linux/arm64

  # Proxy
  - id: proxy
    ids:
      - panda-proxy
    dockerfile: goreleaser.proxy.Dockerfile
    images:
      - "ethpandaops/panda"
    tags:
      - "proxy-{{ .Version }}"
      - "proxy-{{ .Version }}-{{ .ShortCommit }}"
      - "proxy-{{ .Env.LATEST_TAG }}"
    platforms:
      - linux/amd64
      - linux/arm64

release:
  prerelease: auto

checksum:
  name_template: "checksums.txt"

# CycloneDX SBOM per release archive (syft must be on PATH).
sboms:
  - id: archives
    artifacts: archive

# Keyless cosign signature over checksums.txt. Because every artifact is
# listed in checksums.txt, one signature transitively covers them all.
# Verify: cosign verify-blob --certificate checksums.txt.pem \
#   --signature checksums.txt.sig \
#   --certificate-identity-regexp 'https://github.com/ethpandaops/panda/.*' \
#   --certificate-oidc-issuer https://token.actions.githubusercontent.com \
#   checksums.txt
signs:
  - cmd: cosign
    artifacts: checksum
    signature: "${artifact}.sig"
    certificate: "${artifact}.pem"
    args:
      - sign-blob
      - "--yes"
      - "--output-signature"
      - "${signature}"
      - "--output-certificate"
      - "${certificate}"
      - "${artifact}"

changelog:
  sort: asc
  filters:
    exclude:
      - "^docs:"
      - "^test:"