.goreleaser.yaml

version: 2

before:
  hooks:
    - go mod download
    - go generate ./...

builds:
  - env:
      - CGO_ENABLED=0
    goos:
      - linux
      - darwin
    goarch:
      - amd64
      - arm64
    main: .
    binary: tazuna
    flags:
      - -trimpath
    ldflags:
      - -s -w -X main.version={{.Version}} -X main.commit={{.Commit}} -X main.date={{.Date}}

archives:
  - format: tar.gz
    name_template: >-
      {{ .ProjectName }}_
      {{- title .Os }}_
      {{- if eq .Arch "amd64" }}x86_64
      {{- else if eq .Arch "386" }}i386
      {{- else }}{{ .Arch }}{{ end }}
      {{- if .Arm }}v{{ .Arm }}{{ end }}
    format_overrides:
      - goos: windows
        format: zip

checksum:
  name_template: 'checksums.txt'

# Software Bill of Materials. One SPDX document per archive (and one for the source).
# Generated by syft, which must be available on the runner.
sboms:
  - artifacts: archive
  - id: source
    artifacts: source

# Keyless signing of the checksum file via cosign + Sigstore OIDC.
# Produces a single bundle file (*.sigstore.json) that embeds both signature and certificate.
# Verify with: cosign verify-blob --bundle checksums.txt.sigstore.json checksums.txt
# Requires `id-token: write` permission and cosign installed on the runner.
signs:
  - cmd: cosign
    signature: "${artifact}.sigstore.json"
    args:
      - sign-blob
      - "--bundle=${signature}"
      - "${artifact}"
      - "--yes"
    artifacts: checksum
    output: true

snapshot:
  name_template: "{{ incpatch .Version }}-next"

changelog:
  sort: asc
  filters:
    exclude:
      - '^docs:'
      - '^test:'

release:
  github:
    owner: pepabo
    name: tazuna
  draft: false
  prerelease: auto
  name_template: "{{.ProjectName}}-{{.Version}}"
  header: |
    ## Tazuna {{.Version}}

    A CLI tool that automates the bootstrapping of Kubernetes clusters

  footer: |
    **Full Changelog**: https://github.com/pepabo/tazuna/compare/{{.PreviousTag}}...{{.Tag}}