Files
dcmerge/.goreleaser.yaml
Markus Pesch f5eaa7576c
All checks were successful
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (push) Successful in 11s
Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (push) Successful in 7s
Lint Markdown files / Run markdown linter (push) Successful in 5s
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (push) Successful in 29s
Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (push) Successful in 25s
feat(goreleaser): support SBOM and ARMv5
The following patch adjusts the Goreleaser configuration to build ARMv5 binaries
as well as container images. It also replaces docker and docker_manifest with
docker_v2.

Goreleaser has also been extended to generate SBOM files in cdx and spdx format.
2026-01-31 22:17:46 +01:00

317 lines
8.3 KiB
YAML

project_name: dcmerge
archives:
- id: archives
formats:
- tar.xz
name_template: >-
{{ .ProjectName }}-
{{- .Version }}-
{{- .Os }}-
{{- if eq .Arch "amd64" }}amd64
{{- else if eq .Arch "amd64_v1" }}amd64
{{- else }}{{ .Arch }}{{ end }}
{{- if .Arm }}-{{ .Arm }}{{ end }}
files:
- README.md
- LICENSE
before:
hooks:
- go mod tidy
builds:
- id: dcmerge
main: main.go
binary: dcmerge
env:
- CGO_ENABLED=0
- GONOSUMDB={{ .Env.GONOSUMDB }}
- GOPROXY={{ .Env.GOPROXY }}
goos:
- linux
goarch:
- amd64
- arm
- arm64
- riscv64
goarm:
- "5"
- "6"
- "7"
flags:
- -trimpath
- -mod=readonly
- -modcacherw
ldflags:
- -s -w -X 'main.version={{ .Version }}'
changelog:
filters:
exclude:
- '^chore'
- '^docs'
- '^test'
- Merge pull request
- Merge branch
- go mod tidy
format: "{{.SHA}}: {{.Message}} (@{{.AuthorUsername}})"
groups:
- title: Features
regexp: '^.*?feat(\([[:word:]]+\))??!?:.+$'
order: 0
- title: "Bug fixes"
regexp: '^.*?fix(\([[:word:]]+\))??!?:.+$'
order: 1
- title: Others
order: 999
sort: asc
use: git
dockers_v2:
- # ID of the image, needed if you want to filter by it later on (e.g. on custom publishers).
# Default: project name
id: container-images
# Path to the Dockerfile (from the project root).
dockerfile: Dockerfile.scratch
# IDs to filter the binaries/packages.
#
# Make sure to only include the IDs of binaries you want to `COPY` in your
# Dockerfile.
#
# If you include IDs that don't exist or are not available for the current
# architecture being built, the build of the image will be skipped.
ids:
- dcmerge
# Annotations to be added to the image.
annotations:
org.opencontainers.image.authors: "Volker Raschek"
org.opencontainers.image.created: "{{ .Date }}"
org.opencontainers.image.description: "{{ .ProjectName }}"
org.opencontainers.image.documentation: "{{ .ProjectName }}"
org.opencontainers.image.licenses: "MIT"
org.opencontainers.image.revision: "{{ .FullCommit }}"
org.opencontainers.image.source: "{{ .GitURL }}"
org.opencontainers.image.title: "{{ .ProjectName }}"
org.opencontainers.image.url: "https://git.cryptic.systems/volker.raschek/{{ .ProjectName }}"
org.opencontainers.image.vendor: "Volker Raschek"
org.opencontainers.image.version: "{{ .Version }}"
io.artifacthub.package.alternative-locations: "docker.io/volkerraschek/{{ .ProjectName }}:{{ .Version }}"
io.artifacthub.package.keywords: "docker,docker-compose,merge,ci"
io.artifacthub.package.license: "MIT"
io.artifacthub.package.readme-url: "https://git.cryptic.systems/volker.raschek/{{ .ProjectName }}/raw/tag/v{{ .Version }}/README.md"
labels: {}
images:
- 'git.cryptic.systems/volker.raschek/{{ .ProjectName }}'
# Platforms to build.
platforms:
- linux/amd64
- linux/arm/v5
- linux/arm/v6
- linux/arm/v7
- linux/arm64
- linux/riscv64
# Whether to create and attach a SBOM to the image.
sbom: "{{ not .IsNightly }}"
# Tag names.
#
# Empty tags are ignored.
tags:
- "{{ .Version }}"
- "{{ if .IsNightly }}nightly{{ end }}"
- "{{ if not .IsNightly }}latest{{ end }}"
# RPM packages
nfpms:
- id: nfpms
ids:
- dcmerge
package_name: dcmerge
file_name_template: "{{ .Binary }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}{{- if .Arm }}-{{ .Arm }}{{ end }}"
vendor: "Volker Raschek"
homepage: "https://git.cryptic.systems/volker.raschek/{{ .ProjectName }}"
maintainer: "Volker Raschek <volker.raschek@cryptic.systems>"
description: |-
dcmerge is a tool to merge docker-compose files from multiple resources.
It supports merging local files and remote files via HTTP/HTTPS.
license: Apache 2.0
formats:
- deb
- rpm
dependencies:
- git
recommends:
- docker-compose
suggests:
- docker
bindir: /usr/bin
contents:
- src: ./README.md
dst: "/usr/share/doc/{{ .ProjectName }}/README.md"
file_info:
mode: 0644
# License
- src: ./LICENSE
dst: "/usr/share/doc/{{ .ProjectName }}/LICENSE"
file_info:
mode: 0644
- src: ./LICENSE
dst: "/usr/share/licenses/{{ .ProjectName }}/LICENSE"
file_info:
mode: 0644
# Create man page directory
- dst: /usr/share/man/man1
type: dir
file_info:
mode: 0755
rpm:
group: Development/Tools
summary: Tool to merge docker-compose files from multiple resources
compression: xz
deb:
lintian_overrides:
- statically-linked-binary
- changelog-file-missing-in-native-package
sboms:
- # ID of the sbom config, must be unique.
#
# Default: 'default'.
id: sboms-cyclonedx
# IDs of the artifacts to catalog.
#
# If `artifacts` is "source" or "any" then this fields has no effect.
ids:
- dcmerge
# Which artifacts to catalog.
#
# Valid options are:
# - any: let the SBOM tool decide which artifacts available in
# the cwd should be cataloged
# - source: source archive
# - package: Linux packages (deb, rpm, apk, etc)
# - installer: Windows MSI installers (Pro only)
# - diskimage: macOS DMG disk images (Pro only)
# - archive: archives from archive pipe
# - binary: binaries output from the build stage
#
# Default: 'archive'.
artifacts: binary
# List of names of the SBOM documents created at this step
# (relative to the dist dir).
#
# Each element configured is made available as variables. For example:
# documents: ["foo", "bar"]
#
# would make the following variables that can be referenced as template keys:
# document0: "foo"
# document1: "bar"
#
# Note that multiple sbom values are only allowed if the value of
# "artifacts" is "any".
#
# Default:
# When "binary": ["{{ .Binary }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}.sbom.json"]
# When "any": []
# Otherwise: ["{{ .ArtifactName }}.sbom.json"]
# Templates: allowed.
documents:
- "{{ .Binary }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}{{- if .Arm }}-{{ .Arm }}{{ end }}.cdx.json"
# Path to the SBOM generator command
#
# Note: the process CWD will be set to the same location as "dist"
#
# Default: 'syft'.
cmd: syft
# Command line arguments for the command
#
# Default: ["$artifact", "--output", "spdx-json=$document", "--enrich", "all"].
# Templates: allowed.
args:
- "$artifact"
- "--enrich=all"
- "--output=cyclonedx-json=$document"
- # ID of the sbom config, must be unique.
#
# Default: 'default'.
id: sboms-spdx
# IDs of the artifacts to catalog.
#
# If `artifacts` is "source" or "any" then this fields has no effect.
ids:
- dcmerge
# Which artifacts to catalog.
#
# Valid options are:
# - any: let the SBOM tool decide which artifacts available in
# the cwd should be cataloged
# - source: source archive
# - package: Linux packages (deb, rpm, apk, etc)
# - installer: Windows MSI installers (Pro only)
# - diskimage: macOS DMG disk images (Pro only)
# - archive: archives from archive pipe
# - binary: binaries output from the build stage
#
# Default: 'archive'.
artifacts: binary
# List of names of the SBOM documents created at this step
# (relative to the dist dir).
#
# Each element configured is made available as variables. For example:
# documents: ["foo", "bar"]
#
# would make the following variables that can be referenced as template keys:
# document0: "foo"
# document1: "bar"
#
# Note that multiple sbom values are only allowed if the value of
# "artifacts" is "any".
#
# Default:
# When "binary": ["{{ .Binary }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}.sbom.json"]
# When "any": []
# Otherwise: ["{{ .ArtifactName }}.sbom.json"]
# Templates: allowed.
documents:
- "{{ .Binary }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}{{- if .Arm }}-{{ .Arm }}{{ end }}.spdx.json"
# Path to the SBOM generator command
#
# Note: the process CWD will be set to the same location as "dist"
#
# Default: 'syft'.
cmd: syft
# Command line arguments for the command
#
# Default: ["$artifact", "--output", "spdx-json=$document", "--enrich", "all"].
# Templates: allowed.
args:
- "$artifact"
- "--enrich=all"
- "--output=spdx-json=$document"
gitea_urls:
api: https://git.cryptic.systems/api/v1
download: https://git.cryptic.systems
version: 2