checksec/.goreleaser.yml at main · slimm609/checksec · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
version: 2
project_name: checksec

release:
  prerelease: auto
  extra_files:
    - glob: dist/*.sig
    - glob: dist/*.pub
    - glob: dist/*.yaml
    - glob: dist/*.txt

env:
  - DOCKER_CLI_EXPERIMENTAL=enabled
  - CGO_ENABLED=0
  - GOCACHE=/tmp/gocache-checksec

builds:
  - id: core
    binary: checksec
    main: ./main.go
    buildmode: "pie"
    ldflags:
      - -s -w
      - -X "main.version={{ .Version }}"
      - -X "main.commit={{ .Commit }}"
      - -X "main.date={{ .Date }}"
      - -extldflags "-Wl,-z,relro,-z,now,-z,noexecstack"
    goos:
      - linux
      - darwin
    goarch:
      - amd64
      - arm64

sboms:
- id: checksec
  documents:
    - "${artifact}-{{ .Os }}-{{ .Arch }}.spdx.sbom.json"
  cmd: syft
  args: ["${artifact}", "--output", "cyclonedx-json=${document}"]
  artifacts: binary

nfpms:
  - id: linux-packages
    builds:
      - core
    formats:
      - rpm
      - deb
      - apk
    file_name_template: "{{ .ProjectName }}_{{ .Version }}_{{ .Arch }}"
    vendor: checksec
    maintainer: Brian Davis <maintainers@checksec.invalid>
    homepage: https://github.com/slimm609/checksec
    description: Security feature auditing for ELF binaries and Linux kernels.
    license: BSD-3-Clause
    bindir: /usr/bin
    contents:
      - src: LICENSE
        dst: /usr/share/licenses/checksec/LICENSE
      - src: extras/man/checksec.1
        dst: /usr/share/man/man1/checksec.1
    rpm:
      summary: Security feature auditing for ELF binaries and Linux kernels

checksum:
  name_template: "{{ .ProjectName }}_checksums.sha512"
  algorithm: sha512

report_sizes: true