omit vcs info from build (#1514)

The detected info is interfering with the manually specified Scorecard version in the LDFLAGS. While `buildvcs` has been present since Go 1.18, Go 1.24 changed the behavior again. Our docker image uses Go 1.24 as of 3676bbc. https://go.dev/doc/go1.24#go-command Signed-off-by: Spencer Schrock <[email protected]>
ossf · Feb 20, 2025 · 69ae593 · 69ae593
1 parent 6a62a1c
commit 69ae593
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Makefile b/Makefile
@@ -3,4 +3,4 @@ LDFLAGS=-X sigs.k8s.io/release-utils/version.gitVersion=v5.1.1 -X sigs.k8s.io/re
 
 build: ## Runs go build on repo
 	# Run go build and generate scorecard executable
-	CGO_ENABLED=0 go build -o scorecard-action -trimpath -a -tags netgo -ldflags '$(LDFLAGS)'
+	CGO_ENABLED=0 go build -o scorecard-action -trimpath -a -tags netgo -buildvcs=false -ldflags '$(LDFLAGS)'