git.iko.soy/crush
on main help sign in
ci: Update GoReleaser config (#338)
6541e26Ayman Bagabas
.github/workflows/release.yml+6
compare with main
unifiedsplit
@@ -24,3 +24,9 @@ jobs:
24 nfpm_passphrase: ${{ secrets.NFPM_PASSPHRASE }}
24 nfpm_passphrase: ${{ secrets.NFPM_PASSPHRASE }}
25 npm_token: ${{ secrets.NPM_TOKEN }}
25 npm_token: ${{ secrets.NPM_TOKEN }}
26 snapcraft_token: ${{ secrets.SNAPCRAFT_TOKEN }}
26 snapcraft_token: ${{ secrets.SNAPCRAFT_TOKEN }}
27+ aur_key: ${{ secrets.AUR_KEY }}
28+ macos_sign_p12: ${{ secrets.MACOS_SIGN_P12 }}
29+ macos_sign_password: ${{ secrets.MACOS_SIGN_PASSWORD }}
30+ macos_notary_issuer_id: ${{ secrets.MACOS_NOTARY_ISSUER_ID }}
31+ macos_notary_key_id: ${{ secrets.MACOS_NOTARY_KEY_ID }}
32+ macos_notary_key: ${{ secrets.MACOS_NOTARY_KEY }}
.goreleaser.yml+26
@@ -144,6 +144,26 @@ nfpms:
144 - src: ./manpages/crush.1.gz
144 - src: ./manpages/crush.1.gz
145 dst: /usr/share/man/man1/crush.1.gz
145 dst: /usr/share/man/man1/crush.1.gz
146
146
147+signs:
148+ - cmd: cosign
149+ certificate: "${artifact}.pem"
150+ args:
151+ - sign-blob
152+ - "--output-certificate=${certificate}"
153+ - "--output-signature=${signature}"
154+ - "${artifact}"
155+ - "--yes"
156+ artifacts: checksum
157+ output: true
158+
159+source:
160+ enabled: true
161+
162+sboms:
163+ - artifacts: archive
164+ - id: source
165+ artifacts: source
166+
147nix:
167nix:
148 - repository:
168 - repository:
149 owner: "charmbracelet"
169 owner: "charmbracelet"
@@ -210,3 +230,9 @@ changelog:
210 order: 400
230 order: 400
211 - title: Other work
231 - title: Other work
212 order: 9999
232 order: 9999
233+
234+release:
235+ prerelease: auto
236+ footer:
237+ from_url:
238+ url: https://raw.githubusercontent.com/charmbracelet/meta/main/footer.md