Add SBOMs to release (#2801)

.github/workflows/ci.yml

@@ -323,6 +323,9 @@ jobs:
               console.log(`Release notes: ${update.data.body}`)
         if: startsWith(github.ref, 'refs/tags/')
 
+      - name: Download Syft
+        uses: anchore/sbom-action/[email protected]
+
       - name: Build binaries
         uses: goreleaser/goreleaser-action@v3
         with:

.goreleaser.yml

@@ -1,5 +1,6 @@
 env:
   - CGO_ENABLED=0
+
 builds:
   - id: kubernetes-ingress
     goos:
@@ -40,14 +41,23 @@ builds:
     binary: nginx-ingress
     tags:
       - aws
+
 archives:
   - id: kubernetes-ingress
     format: binary
     builds: [kubernetes-ingress]
-  - id: aws
-    format: binary
-    builds: [aws]
+
 changelog:
   skip: true
+
+checksum:
+  name_template: 'checksums.txt'
+
+sboms:
+  - artifacts: binary
+    ids: [kubernetes-ingress]
+
 release:
   ids: [kubernetes-ingress]
+  extra_files:
+    - glob: ./dist/**.sbom