Skip to content

chore: release with goreleaser#720

Merged
janisz merged 24 commits intostackrox:mainfrom
janisz:release_with_goreleaser
Feb 21, 2024
Merged

chore: release with goreleaser#720
janisz merged 24 commits intostackrox:mainfrom
janisz:release_with_goreleaser

Conversation

@janisz
Copy link
Collaborator

@janisz janisz commented Feb 15, 2024

Using goreleaser will help us with releasing on different platforms.
This PR make it working like we used to have. In next PRs I'd like to add arm and if we like other platform support.

Tested:
https://github.com/janisz/kube-linter/releases/tag/v0.7.21

cosign verify  ghcr.io/janisz/kube-linter:latest  --certificate-identity-regexp=.+ --cer
tificate-oidc-issuer-regexp=.+

Verification for ghcr.io/janisz/kube-linter:latest --
The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - Existence of the claims in the transparency log was verified offline
  - The code-signing certificate was verified using trusted certificate authority certificates

[{"critical":{"identity":{"docker-reference":"ghcr.io/janisz/kube-linter"},"image":{"docker-manifest-digest":"sha256:c9ca9745779e59dace1f41ffa0e0a095ec2f21bba3be12812115a4a4bd0bd441"},"type":"cosign container image signature"},"optional":{"1.3.6.1.4.1.57264.1.1":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.2":"push","1.3.6.1.4.1.57264.1.3":"a56cb5b11f5ba3f691502f30cee2c810268c92d7","1.3.6.1.4.1.57264.1.4":"Release kube-linter","1.3.6.1.4.1.57264.1.5":"janisz/kube-linter","1.3.6.1.4.1.57264.1.6":"refs/tags/v0.7.21","Bundle":{"SignedEntryTimestamp":"MEQCICEh0ldsmpTKcmNtY0fYoMyyAxaxZl3I9BvZkXtcMJ2WAiAuBCePtyqcHnh2njguTfu2FCwFwfavBu4G4CGS+Q6AVA==","Payload":{"body":"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","integratedTime":1708096588,"logIndex":71843182,"logID":"c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d"}},"Issuer":"https://token.actions.githubusercontent.com","Subject":"https://github.com/janisz/kube-linter/.github/workflows/release.yaml@refs/tags/v0.7.21","githubWorkflowName":"Release kube-linter","githubWorkflowRef":"refs/tags/v0.7.21","githubWorkflowRepository":"janisz/kube-linter","githubWorkflowSha":"a56cb5b11f5ba3f691502f30cee2c810268c92d7","githubWorkflowTrigger":"push"}}]

@janisz janisz force-pushed the release_with_goreleaser branch 2 times, most recently from 01f0f14 to 98254b1 Compare February 15, 2024 18:18
Signed-off-by: Tomasz Janiszewski <tomek@redhat.com>
Signed-off-by: Tomasz Janiszewski <tomek@redhat.com>
Signed-off-by: Tomasz Janiszewski <tomek@redhat.com>
Signed-off-by: Tomasz Janiszewski <tomek@redhat.com>
Signed-off-by: Tomasz Janiszewski <tomek@redhat.com>
Signed-off-by: Tomasz Janiszewski <tomek@redhat.com>
Signed-off-by: Tomasz Janiszewski <tomek@redhat.com>
Signed-off-by: Tomasz Janiszewski <tomek@redhat.com>
Signed-off-by: Tomasz Janiszewski <tomek@redhat.com>
Signed-off-by: Tomasz Janiszewski <tomek@redhat.com>
@janisz janisz force-pushed the release_with_goreleaser branch from 98254b1 to 47ebcfb Compare February 15, 2024 18:42
Signed-off-by: Tomasz Janiszewski <tomek@redhat.com>
Signed-off-by: Tomasz Janiszewski <tomek@redhat.com>
Signed-off-by: Tomasz Janiszewski <tomek@redhat.com>
Signed-off-by: Tomasz Janiszewski <tomek@redhat.com>
Signed-off-by: Tomasz Janiszewski <tomek@redhat.com>
Signed-off-by: Tomasz Janiszewski <tomek@redhat.com>
Signed-off-by: Tomasz Janiszewski <tomek@redhat.com>
Signed-off-by: Tomasz Janiszewski <tomek@redhat.com>
Signed-off-by: Tomasz Janiszewski <tomek@redhat.com>
@janisz janisz changed the title Release with goreleaser chore: release with goreleaser Feb 16, 2024
@janisz janisz requested a review from dhaus67 February 16, 2024 15:50
Signed-off-by: Tomasz Janiszewski <tomek@redhat.com>
# Install the cosign tool except on PR
# https://github.com/sigstore/cosign-installer
- name: Install cosign
if: github.event_name != 'pull_request'
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Wondering if we need that since we only run this on tags and push? (applies to all occurrences)

janisz and others added 2 commits February 20, 2024 16:59
Co-authored-by: dhaus67 <dhaus@redhat.com>
Signed-off-by: Tomasz Janiszewski <tomek@redhat.com>
@janisz janisz requested a review from dhaus67 February 20, 2024 16:01
@codecov
Copy link

codecov bot commented Feb 20, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

❗ No coverage uploaded for pull request base (main@9ba3ac7). Click here to learn what that means.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #720   +/-   ##
=======================================
  Coverage        ?   72.36%           
=======================================
  Files           ?       45           
  Lines           ?     1936           
  Branches        ?        0           
=======================================
  Hits            ?     1401           
  Misses          ?      421           
  Partials        ?      114           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Signed-off-by: Tomasz Janiszewski <tomek@redhat.com>
@janisz janisz added the chore Maintenance work label Feb 21, 2024
@janisz janisz merged commit 0c08521 into stackrox:main Feb 21, 2024
@janisz janisz deleted the release_with_goreleaser branch February 21, 2024 11:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

chore Maintenance work

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants