money/.goreleaser.yaml at main · thedavidweng/money · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
version: 2

builds:
  - main: ./cmd/money
    binary: money
    ldflags:
      - -s -w
      - -X github.com/thedavidweng/money/internal/cli.Version={{.Version}}
      - -X github.com/thedavidweng/money/internal/cli.Commit={{.ShortCommit}}
    goos:
      - linux
      - darwin
      - windows
    goarch:
      - amd64
      - arm64

universal_binaries:
  - name_template: "money_{{ .Version }}_darwin_all"

archives:
  - formats: [tar.gz]
    name_template: "money_{{ .Version }}_{{ .Os }}_{{ .Arch }}"
    format_overrides:
      - goos: windows
        formats: [zip]

nfpms:
  - package_name: money
    vendor: thedavidweng
    maintainer: thedavidweng <noreply@github.com>
    homepage: https://github.com/thedavidweng/money
    description: "Local-first personal finance backend for agents and power users"
    license: Apache-2.0
    formats:
      - deb
      - rpm
      - apk
    bindir: /usr/bin

checksum:
  name_template: "checksums.txt"
  algorithm: sha256

signs:
  - artifacts: checksum
    cmd: cosign
    output: true
    args:
      - "sign-blob"
      - "--yes"
      - "--bundle=${signature}"
      - "${artifact}"

sboms:
  - cmd: syft
    artifacts: archive
    args:
      - "${artifact}"
      - --output
      - spdx-json=${document}
    documents:
      - "${artifact}.spdx.json"

changelog:
  disable: true

release:
  mode: append
  github:
    owner: thedavidweng
    name: money
  header: |
    ## Installation

    **Homebrew Cask (macOS/Linux):**
    ```
    brew install --cask thedavidweng/tap/money
    ```

    **Go:**
    ```
    go install github.com/thedavidweng/money/cmd/money@{{ .Tag }}
    ```

    **Pre-built binaries:** Download below and verify with `checksums.txt`.

    ## Verify signatures

    This release is signed with [Sigstore](https://sigstore.dev) keyless signing.
    To verify the checksums file:
    ```
    cosign verify-blob \
      --bundle checksums.txt.sig \
      --certificate-identity-regexp="https://github.com/thedavidweng/money" \
      --certificate-oidc-issuer="https://token.actions.githubusercontent.com" \
      checksums.txt
    ```

homebrew_casks:
  - name: money
    binaries:
      - money
    repository:
      owner: thedavidweng
      name: homebrew-tap
      token: "{{ .Env.HOMEBREW_TAP_GITHUB_TOKEN }}"
    homepage: "https://github.com/thedavidweng/money"
    license: "Apache-2.0"
    description: "Local-first personal finance backend for agents and power users"
    hooks:
      post:
        install: |
          if OS.mac?
            system_command "/usr/bin/xattr", args: ["-dr", "com.apple.quarantine", "#{staged_path}/money"]
          end