mirror of
https://github.com/ossf/scorecard.git
synced 2024-09-17 11:57:12 +03:00
8534836923
- shared configuration generation in ./scripts/version-ldflags Signed-off-by: Appu Goundan <appu@google.com>
40 lines
1.0 KiB
YAML
40 lines
1.0 KiB
YAML
before:
|
|
hooks:
|
|
# You may remove this if you don't use go modules.
|
|
- go mod download
|
|
builds:
|
|
- env:
|
|
- CGO_ENABLED=0
|
|
goos:
|
|
- linux
|
|
- windows
|
|
- darwin
|
|
# List of combinations of GOOS + GOARCH + GOARM to ignore.
|
|
# Default is empty.
|
|
ignore:
|
|
- goos: darwin
|
|
goarch: 386
|
|
- goos: darwin
|
|
goarch: arm64
|
|
# CI should set VERSION_LDFLAGS to the output of ./scripts/version_ldflags
|
|
ldflags:
|
|
- -s -w {{.Env.VERSION_LDFLAGS}}
|
|
archives:
|
|
- replacements:
|
|
linux: Linux
|
|
386: i386
|
|
amd64: x86_64
|
|
|
|
checksum:
|
|
# Algorithm to be used.
|
|
# Accepted options are sha256, sha512, sha1, crc32, md5, sha224 and sha384.
|
|
# Default is sha256.
|
|
algorithm: sha512
|
|
changelog:
|
|
# Set it to true if you wish to skip the changelog generation.
|
|
# This may result in an empty release notes on GitHub/GitLab/Gitea.
|
|
skip: true
|
|
signs:
|
|
- artifacts: checksum
|
|
args: ["--batch", "-u", "{{ .Env.GPG_FINGERPRINT }}", "--output", "${signature}", "--detach-sign", "${artifact}"]
|