go/goreleaser
go/goreleaser
1
0
Fork 0
mirror of https://github.com/goreleaser/goreleaser.git synced 2025-01-24 04:16:27 +02:00
Code Issues Releases Activity
5,743 Commits 10 Branches 560 Tags
Commit Graph

1516 Commits

Author SHA1 Message Date
Carlos Alexandro Becker
a5f767832a
SBOM improvements (#4430) 
refs https://github.com/orgs/goreleaser/discussions/4425
 2023-11-23 17:40:25 -03:00
Gabriel Cipriano
8f6b16f6b5
feat: validate ko's main path (#4429) 
closes #4382
 2023-11-19 14:54:18 -03:00
laurentsimon
b149223223
feat(docs): Update command in SLSA verification blog post (#4420) 
Great blog post! I added it to the documentation of the
https://github.com/slsa-framework/slsa-github-generator :)

This PR fixes the command to verify SLSA provenance in the blog post
https://goreleaser.com/blog/slsa-generation-for-your-artifacts/.

The verification for binary artifacts is correct.

The verification for container images is incorrect:
- The command verifies the identity of the builder only, but it should
also verify the source repository
- The command does not verify the release version, which _may_ allows an
attacker to perform a downgrade attack. (not a super big deal, but still
useful to close this gap if the image was built on a tag trigger)

This follows the same steps on argoCD's documentation
https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/#verification-of-container-image-with-slsa-attestations

Thanks!

---------

Signed-off-by: laurentsimon <laurentsimon@google.com>
 2023-11-13 12:35:44 -03:00
actions-user
c4a33d5b83 chore: docs auto-update 2023-11-09 00:13:54 +00:00
actions-user
17393af9fa chore: docs auto-update 2023-11-07 01:07:54 +00:00
Carlos Alexandro Becker
4f17fba173
build: fix setup-task rate limit 
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2023-11-07 01:05:02 +00:00
Carlos Alexandro Becker
6b65ea5ca1
docs: update 
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2023-11-07 00:39:45 +00:00
Ernst Widerberg
d2d910f54f
docs: fix typos (#4406) 2023-11-06 09:14:07 -03:00
Carlos Alexandro Becker
bc4523d4fe
docs: fix discord link 
closes #4357
 2023-11-04 02:42:53 +00:00
Carlos Alexandro Becker
74a9317c83 fix: properly handle multi-module projects with a go.work file 
closes #4379
 2023-11-03 23:40:07 -03:00
Torsten Curdt
49f39736ef more explicit error message for docker buildx context error 2023-11-03 22:00:17 -03:00
Torsten Curdt
cb656a35ec spelling fix 2023-11-03 22:00:17 -03:00
Carlos Alexandro Becker
178ce2af58 build: only update docs, schema, after a release 
closes #4402
 2023-11-03 21:37:39 -03:00
Carlos Alexandro Becker
8cd3104f1c
chore: update schema 
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2023-11-02 20:38:07 +00:00
Carlos Alexandro Becker
3a3cf610f8
docs: conventional file name on armv6 
refs https://github.com/charmbracelet/meta/pull/116
 2023-11-02 12:32:31 +00:00
actions-user
9c54dda3ba chore: docs auto-update 2023-10-31 21:36:51 +00:00
actions-user
c5de7c54ee chore: docs auto-update 2023-10-31 18:12:45 +00:00
Carlos Alexandro Becker
bc9f77b0e5 fix: schema enum options for dockers.use 
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2023-10-25 22:51:30 -03:00
Carlos Alexandro Becker
de1c52b466 fix: improve run script 
- if `VERSION` ends with `-pro`, set `DISTRIBUTION` to `pro`
- if `DISTRIBUTION` is `pro`, and `VERSION` does not have the `-pro`
  suffix, add it

closes #4374
 2023-10-25 22:51:30 -03:00
Batuhan Apaydın
a932dd85de
SLSA Provenance generation blog post (#4361) 
kindly ping @Dentrax

Signed-off-by: Batuhan Apaydin <batuhan.apaydin@chainguard.dev>
 2023-10-11 09:41:49 -03:00
actions-user
95e5ef6226 chore: docs auto-update 2023-10-10 12:39:32 +00:00
Carlos Alexandro Becker
b7218b0ab0
docs: fix broken link 2023-09-29 00:49:02 +00:00
Carlos Alexandro Becker
d7775f5b05
docs: organizing docs a bit better (#4328) 
the sidebar is kinda out of control... too many items... tried to
organize it a bit better...

let me know what you think :D

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2023-09-27 14:06:49 -03:00
Carlos Alexandro Becker
85e1458d6c
docs: release cadence post (#4329) 
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2023-09-27 14:06:37 -03:00
actions-user
9a645b4121 chore: docs releases json auto-update 2023-09-26 12:53:47 +00:00
actions-user
cac55e0c4c chore: docs releases json auto-update 2023-09-26 11:45:07 +00:00
actions-user
5860c2a55f chore: docs releases json auto-update 2023-09-25 18:15:14 +00:00
actions-user
b552487f6a chore: docs releases json auto-update 2023-09-25 17:27:40 +00:00
Carlos Alexandro Becker
74b226db47
docs: reword 
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2023-09-24 19:04:07 +00:00
Carlos Alexandro Becker
41ce3c0304
fix: git.ignore_tags not working (#4322) 
also regex is not possible there currenctly, didnt realized it at the
time

refs #4255

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2023-09-23 02:37:48 -03:00
Carlos Alexandro Becker
800ee694f6
docs: update announcement blog post 2023-09-23 05:31:42 +00:00
Carlos Alexandro Becker
e194d4cfca
docs: draft 1.21 announcement (#4310) 
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2023-09-23 00:50:05 -03:00
actions-user
1318fdc0cf chore: docs releases json auto-update 2023-09-23 03:44:11 +00:00
actions-user
af276549f7 chore: docs releases json auto-update 2023-09-23 03:02:58 +00:00
Carlos Alexandro Becker
8794dc5955
docs: udpate jsonschema 
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2023-09-22 02:20:49 +00:00
Carlos Alexandro Becker
d5a81df6c5
docs: improve tmpl.map 
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2023-09-20 19:21:30 +00:00
Jo
24347358e9
feat: add map and indexOrDefault template functions (#4317) 
Add a new function `map` to template functions.

`map` creates a map from a list of pairs of key values, then you can
convert a key to a value using `.Get`. This simplifies writing
key-mapping templates. For example, the defaule `archives.name_template`

```yaml
name_template: >-
    {{ .ProjectName }}_
    {{- title .Os }}_
    {{- if eq .Arch "amd64" }}x86_64
    {{- else if eq .Arch "386" }}i386
    {{- else }}{{ .Arch }}{{ end }}
    {{- if .Arm }}v{{ .Arm }}{{ end }}
```

becomes

```yaml
name_template: >-
  {{ $arch := map "amd64" "x86_64" "386" "i386" -}}
  {{ .ProjectName }}_
  {{- title .OS }}_
  {{- $arch.Get .Arch .Arch }}
  {{- if .Arm }}v{{ .Arm }}{{ end }}
```

---------

Co-authored-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2023-09-20 16:03:46 -03:00
Carlos Alexandro Becker
eab8a0d07b
docs: clarify includes 2023-09-19 00:31:05 +00:00
Carlos Alexandro Becker
491bf50d69
chore: schema update 
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2023-09-17 17:24:09 +00:00
Carlos Alexandro Becker
8ef8babedf
feat(winget): support dependencies (#4299) 
closes #4296
 2023-09-17 14:22:39 -03:00
Carlos Alexandro Becker
58842b8e82
docs: update 
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2023-09-17 17:05:14 +00:00
Carlos Alexandro Becker
5767a3bd1e
docs: update 
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2023-09-17 03:00:02 +00:00
Carlos Alexandro Becker
622c426eb3
refactor: --skip=item (#4272) 
Laying the ground work to allow skipping more pipes without adding new
flags et al.

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2023-09-16 17:01:20 -03:00
Carlos Alexandro Becker
85c86d61cf
fix: chocolatey push failing (#4300) 
tested this on a fake repo, and it seems to fix the problem...

seems like choco does not like when the path has `/` in it, so passing
it through `filepath.Clean` fixes it.

also improved tests a bit, and made a small docs fix.


closes https://github.com/goreleaser/goreleaser/issues/4292
 2023-09-16 14:08:11 -03:00
Carlos Alexandro Becker
fcd5abfe68
docs: update goreleaser-action (#4297) 
action v5 was released the other day

---------

Co-authored-by: CrazyMax <github@crazymax.dev>
 2023-09-15 09:23:19 -03:00
Carlos Alexandro Becker
027ddd3b17
docs: fix broken links 2023-09-15 01:06:58 +00:00
Carlos Alexandro Becker
3633b71eea
docs: fix some broken links (#4295) 
fixes some bad links.

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2023-09-14 21:54:55 -03:00
Carlos Alexandro Becker
f62adf23ff
docs: blog (#4264) 
Starting to move the blog from medium to mkdocs!

closes #3503

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2023-09-14 13:53:40 -03:00
Vedant
646eb82f9a
docs: fix link to homebrew formula on install page (#4294) 
Fix link to homebrew formula on `install` page
 2023-09-14 13:48:22 -03:00
Carlos Alexandro Becker
d510abcd5e
docs: improve docs 
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
 2023-09-04 14:12:01 +00:00