# yaml-language-server: $schema=https://goreleaser.com/static/schema.json

version: 2

project_name: gittuf

builds:
- id: gittuf
  mod_timestamp: '{{ .CommitTimestamp }}'
  env:
  - CGO_ENABLED=0
  flags:
  - -trimpath
  goos:
  - linux
  - darwin
  - freebsd
  - windows
  goarch:
  - amd64
  - arm64
  ldflags:
  - "-s -w"
  - "-extldflags=-zrelro"
  - "-extldflags=-znow"
  - "-buildid= -X github.com/gittuf/gittuf/internal/version.gitVersion={{ .Version }}"

- id: git-remote-gittuf
  mod_timestamp: '{{ .CommitTimestamp }}'
  main: ./internal/git-remote-gittuf
  binary: git-remote-gittuf
  env:
  - CGO_ENABLED=0
  flags:
  - -trimpath
  goos:
  - linux
  - darwin
  - freebsd
  - windows
  goarch:
  - amd64
  - arm64
  ldflags:
  - "-s -w"
  - "-extldflags=-zrelro"
  - "-extldflags=-znow"
  - "-buildid= -X github.com/gittuf/gittuf/internal/version.gitVersion={{ .Version }}"

archives:
- id: binary
  formats: ['binary']
  allow_different_binary_count: true

# This section defines how gittuf releases are automatically sent to WinGet as
# pull requests.
# Configuration inspired from that of the Minder project:
# https://github.com/mindersec/minder/blob/main/.goreleaser.yaml
winget:
  - name: gittuf
    publisher: gittuf
    license: Apache-2.0
    license_url: "https://github.com/gittuf/gittuf/blob/main/LICENSE"
    copyright: The gittuf Authors
    homepage: https://gittuf.dev/
    short_description: 'A security layer for Git repositories'
    publisher_support_url: "https://github.com/gittuf/gittuf/issues"
    package_identifier: "gittuf.gittuf"
    url_template: "https://github.com/gittuf/gittuf/releases/download/{{ .Tag }}/{{ .ArtifactName }}"
    skip_upload: auto
    release_notes: "https://github.com/gittuf/gittuf/blob/main/CHANGELOG.md#v{{ .Major }}{{ .Minor }}{{ .Patch }}"
    ids:
      - gittuf
    tags:
      - git
      - git-security
      - gittuf
    commit_author:
      name: openssf-robot
      email: openssf-robot@openssf.org
    goamd64: v1
    repository:
      owner: gittuf
      name: winget-pkgs
      branch: "gittuf-{{.Version}}"
      token: "{{ .Env.WINGET_GITHUB_TOKEN }}"
      pull_request:
        enabled: true
        draft: false
        base:
          owner: microsoft
          name: winget-pkgs
          branch: master
  - name: git-remote-gittuf
    publisher: gittuf
    license: Apache-2.0
    license_url: "https://github.com/gittuf/gittuf/blob/main/LICENSE"
    copyright: The gittuf Authors
    homepage: https://gittuf.dev/
    short_description: "gittuf's custom Git remote transfer protocol binary"
    publisher_support_url: "https://github.com/gittuf/gittuf/issues"
    package_identifier: "gittuf.git-remote-gittuf"
    url_template: "https://github.com/gittuf/gittuf/releases/download/{{ .Tag }}/{{ .ArtifactName }}"
    skip_upload: auto
    release_notes: "https://github.com/gittuf/gittuf/blob/main/CHANGELOG.md#v{{ .Major }}{{ .Minor }}{{ .Patch }}"
    ids:
      - git-remote-gittuf
    tags:
      - git
      - git-security
      - gittuf
    commit_author:
      name: openssf-robot
      email: openssf-robot@openssf.org
    goamd64: v1
    repository:
      owner: gittuf
      name: winget-pkgs
      branch: "git-remote-gittuf-{{.Version}}"
      token: "{{ .Env.WINGET_GITHUB_TOKEN }}"
      pull_request:
        enabled: true
        draft: false
        base:
          owner: microsoft
          name: winget-pkgs
          branch: master

gomod:
  proxy: true

changelog:
  disable: true

checksum:
  name_template: "checksums.txt"

signs:
- cmd: cosign
  env:
  - COSIGN_YES=true
  signature: '${artifact}.sigstore.json'
  args:
  - sign-blob
  - '${artifact}'
  - '--bundle=${signature}'
  artifacts: checksum
  output: true

source:
  enabled: true
  name_template: "{{ .ProjectName }}.src"

sboms:
  - artifacts: archive
  - id: source
    artifacts: source

release:
  prerelease: allow
  github:
    owner: gittuf
    name: gittuf
  draft: true