From fd238d0e40ebc898e4aa592ad133b1f15687384f Mon Sep 17 00:00:00 2001
From: naveen <172697+naveensrinivasan@users.noreply.github.com>
Date: Tue, 26 Oct 2021 20:54:49 +0000
Subject: [PATCH] :seedling: Fix goreleaser permission and flags

Fixes goreleaser flags issue and sets specific permission for
goreleaser.
---
 .github/workflows/goreleaser.yaml |  2 ++
 .goreleaser.yml                   | 37 ++++++++++++++++++++++---------
 2 files changed, 29 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/goreleaser.yaml b/.github/workflows/goreleaser.yaml
index 8f2bc441..50a9b97d 100644
--- a/.github/workflows/goreleaser.yaml
+++ b/.github/workflows/goreleaser.yaml
@@ -22,6 +22,8 @@ on:
 jobs:
   goreleaser:
     runs-on: ubuntu-latest
+    permissions:
+     contents: write
     steps:
       -
         name: Checkout
diff --git a/.goreleaser.yml b/.goreleaser.yml
index ce9449a9..2feb2de7 100644
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -7,19 +7,18 @@ before:
   hooks:
     - go mod download
 builds:
-flags:
- # trimpath is for reproducible builds
- # remove all file system paths from the resulting executable.
- # Instead of absolute file system paths, the recorded file names
- # will begin with either "go" (for the standard library),
- # or a module path@version (when using modules),
- # or a plain import path (when using GOPATH).
-    - -trimpath
-    - -tags=netgo
-
 - id: linux
   binary: scorecard-linux-{{ .Arch }}
   no_unique_dist_dir: true
+  flags:
+   # trimpath is for reproducible builds
+   # remove all file system paths from the resulting executable.
+   # Instead of absolute file system paths, the recorded file names
+   # will begin with either "go" (for the standard library),
+   # or a module path@version (when using modules),
+   # or a plain import path (when using GOPATH).
+      - -trimpath
+      - -tags=netgo
   goos:
     - linux
   goarch:
@@ -33,6 +32,15 @@ flags:
 - id: darwin
   binary: scorecard-darwin-{{ .Arch }}
   no_unique_dist_dir: true
+  flags:
+   # trimpath is for reproducible builds
+   # remove all file system paths from the resulting executable.
+   # Instead of absolute file system paths, the recorded file names
+   # will begin with either "go" (for the standard library),
+   # or a module path@version (when using modules),
+   # or a plain import path (when using GOPATH).
+      - -trimpath
+      - -tags=netgo
   goos:
     - darwin
   goarch:
@@ -44,6 +52,15 @@ flags:
 - id: windows
   binary: scorecard-windows-{{ .Arch }}
   no_unique_dist_dir: true
+  flags:
+   # trimpath is for reproducible builds
+   # remove all file system paths from the resulting executable.
+   # Instead of absolute file system paths, the recorded file names
+   # will begin with either "go" (for the standard library),
+   # or a module path@version (when using modules),
+   # or a plain import path (when using GOPATH).
+      - -trimpath
+      - -tags=netgo
   goos:
     - windows
   goarch: