git.iko.soy/crush
on main help sign in
ci: Update GoReleaser config (#338)

* fix(ci): use brew formula instead of cask * fix(ci): add cosign signing to goreleaser * fix(ci): release: add workflow secrets * fix(ci): release: add source sbom * fix(ci): release: add footer from meta * fix(ci): release: use homebrew_casks instead of brews

commit6541e262cee2cb9c4512f6d091582ff8e8899fbb authorAyman Bagabas <ayman.bagabas@gmail.com> dateTue 29 Jul 2025, 15:41 (1 year ago) parenta2a3619
2 files changed+32
compare with main
unifiedsplit
.github/workflows/release.yml+6 .goreleaser.yml+26
.github/workflows/release.yml+6
@@ -24,3 +24,9 @@ jobs:
2424 nfpm_passphrase: ${{ secrets.NFPM_PASSPHRASE }}
2525 npm_token: ${{ secrets.NPM_TOKEN }}
2626 snapcraft_token: ${{ secrets.SNAPCRAFT_TOKEN }}
27+ aur_key: ${{ secrets.AUR_KEY }}
28+ macos_sign_p12: ${{ secrets.MACOS_SIGN_P12 }}
29+ macos_sign_password: ${{ secrets.MACOS_SIGN_PASSWORD }}
30+ macos_notary_issuer_id: ${{ secrets.MACOS_NOTARY_ISSUER_ID }}
31+ macos_notary_key_id: ${{ secrets.MACOS_NOTARY_KEY_ID }}
32+ macos_notary_key: ${{ secrets.MACOS_NOTARY_KEY }}
.goreleaser.yml+26
@@ -144,6 +144,26 @@ nfpms:
144144 - src: ./manpages/crush.1.gz
145145 dst: /usr/share/man/man1/crush.1.gz
146146
147+signs:
148+ - cmd: cosign
149+ certificate: "${artifact}.pem"
150+ args:
151+ - sign-blob
152+ - "--output-certificate=${certificate}"
153+ - "--output-signature=${signature}"
154+ - "${artifact}"
155+ - "--yes"
156+ artifacts: checksum
157+ output: true
158+
159+source:
160+ enabled: true
161+
162+sboms:
163+ - artifacts: archive
164+ - id: source
165+ artifacts: source
166+
147167nix:
148168 - repository:
149169 owner: "charmbracelet"
@@ -210,3 +230,9 @@ changelog:
210230 order: 400
211231 - title: Other work
212232 order: 9999
233+
234+release:
235+ prerelease: auto
236+ footer:
237+ from_url:
238+ url: https://raw.githubusercontent.com/charmbracelet/meta/main/footer.md