mirror of
https://github.com/ossf/scorecard.git
synced 2024-11-05 05:17:00 +03:00
cbc556fbec
Co-authored-by: Azeem Shaikh <azeems@google.com>
38 lines
1009 B
YAML
38 lines
1009 B
YAML
before:
|
|
hooks:
|
|
# You may remove this if you don't use go modules.
|
|
- go mod download
|
|
builds:
|
|
- env:
|
|
- CGO_ENABLED=0
|
|
goos:
|
|
- linux
|
|
- windows
|
|
- darwin
|
|
# List of combinations of GOOS + GOARCH + GOARM to ignore.
|
|
# Default is empty.
|
|
ignore:
|
|
- goos: darwin
|
|
goarch: 386
|
|
# CI should set VERSION_LDFLAGS to the output of ./scripts/version_ldflags
|
|
ldflags:
|
|
- -s -w {{.Env.VERSION_LDFLAGS}}
|
|
archives:
|
|
- replacements:
|
|
linux: Linux
|
|
386: i386
|
|
amd64: x86_64
|
|
|
|
checksum:
|
|
# Algorithm to be used.
|
|
# Accepted options are sha256, sha512, sha1, crc32, md5, sha224 and sha384.
|
|
# Default is sha256.
|
|
algorithm: sha512
|
|
changelog:
|
|
# Set it to true if you wish to skip the changelog generation.
|
|
# This may result in an empty release notes on GitHub/GitLab/Gitea.
|
|
skip: false
|
|
signs:
|
|
- artifacts: checksum
|
|
args: ["--batch", "-u", "{{ .Env.GPG_FINGERPRINT }}", "--output", "${signature}", "--detach-sign", "${artifact}"]
|