.goreleaser.yml

version: 2
dist: release
release:
  github:
    owner: ekristen
    name: cast
  extra_files:
    - glob: "./*.pub"
  footer: |
    ## Release Verification

    You can verify a release of cast by using cosign and it's verify-blob command and simply point to the hosted files.
    If you'd rather download them you can do that as well and run the same command to verify.

    ```bash
    cosign verify-blob \
      --key https://github.com/ekristen/cast/releases/download/v{{.Version}}/cosign.pub \
      --signature https://github.com/ekristen/cast/releases/download/v{{.Version}}/cast_v{{.Version}}_linux_amd64.tar.gz.sig \
      https://github.com/ekristen/cast/releases/download/v{{.Version}}/cast_v{{.Version}}_linux_amd64.tar.gz
    ```
  prerelease: auto
env:
  - CGO_ENABLED=0
builds:
  - id: cast
    goos:
      - linux
      - darwin
    goarch:
      - amd64
      - arm64
    ldflags:
      - -s
      - -w
      - -extldflags="-static"
      - -X '{{ .ModulePath }}/pkg/common.SUMMARY=v{{ .Version }}'
      - -X '{{ .ModulePath }}/pkg/common.BRANCH={{ .Branch }}'
      - -X '{{ .ModulePath }}/pkg/common.VERSION={{ .Tag }}'
      - -X '{{ .ModulePath }}/pkg/common.COMMIT={{ .Commit }}'
    hooks:
      post:
        - cmd: |
            {{- if eq .Os "darwin" -}} 
            quill sign-and-notarize "{{ .Path }}" --dry-run={{ .IsSnapshot }} --ad-hoc={{ .IsSnapshot }} -vv
            {{- else -}}
            true
            {{- end -}}
          env:
            - QUILL_LOG_FILE=/tmp/quill-{{ .Target }}.log
archives:
  - id: cast
    builds:
      - cast
    name_template: "{{ .ProjectName }}-v{{ .Version }}-{{ .Os }}-{{ .Arch }}{{ .Arm }}"
    format_overrides:
      - goos: windows
        format: zip
signs:
  - ids:
      - default
      - darwin
    cmd: cosign
    signature: "${artifact}.sig"
    certificate: "${artifact}.pem"
    args: ["sign-blob", "--yes", "--oidc-provider=github", "--oidc-issuer=https://token.actions.githubusercontent.com", "--output-certificate=${certificate}", "--output-signature=${signature}", "${artifact}"]
    artifacts: all
nfpms:
  - id: cast
    package_name: cast
    builds:
      - cast
    vendor: ekristen.dev
    file_name_template: "{{ .PackageName }}-v{{ .Version }}-{{ .Os }}-{{ .Arch }}{{ with .Arm }}v{{ . }}{{ end }}{{ with .Mips }}-{{ . }}{{ end }}"
    homepage: https://github.com/ekristen/cast
    maintainer: Erik Kristensen <erik@erikkristensen.com>
    description: Cast is an installer tool for any Cast compatible distro
    license: MIT
    formats:
      - deb
    deb:
      signature:
        key_file: "{{ .Env.NFPM_GPG_KEY }}"
        type: origin
checksum:
  name_template: "checksums.txt"
snapshot:
  version_template: '{{ trimprefix .Summary "v" }}'
changelog:
  disable: true