Merge pull request wolfi-dev#19272 from hectorj2f/add_ldflags

lpcalisi · May 14, 2024 · 89a9c95 · 89a9c95
2 parents 22f343e + 0230bec
commit 89a9c95
Show file tree

Hide file tree

Showing 14 changed files with 28 additions and 14 deletions.
diff --git a/amass.yaml b/amass.yaml
@@ -1,7 +1,7 @@
 package:
   name: amass
   version: 4.2.0
-  epoch: 8
+  epoch: 9
   description: "attack surfaces and external asset discovery tools set"
   copyright:
     - license: Apache-2.0
@@ -28,6 +28,7 @@ pipeline:
       packages: ./cmd/amass
       modroot: .
       output: amass
+      ldflags: -w -X main.version=${{package.version}} -X main.commit=$(git rev-parse HEAD) -X main.date=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
   - uses: strip
 

diff --git a/buf.yaml b/buf.yaml
@@ -1,7 +1,7 @@
 package:
   name: buf
   version: 1.31.0
-  epoch: 2
+  epoch: 3
   description: A new way of working with Protocol Buffers.
   copyright:
     - license: Apache-2.0
@@ -24,6 +24,7 @@ pipeline:
       packages: ./cmd/buf
       modroot: .
       output: buf
+      ldflags: -w -X main.version=${{package.version}} -X main.commit=$(git rev-parse HEAD) -X main.date=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
   - uses: strip
 

diff --git a/controller-gen.yaml b/controller-gen.yaml
@@ -1,7 +1,7 @@
 package:
   name: controller-gen
   version: 0.15.0
-  epoch: 2
+  epoch: 3
   description: Tools to use with the controller-runtime libraries
   copyright:
     - license: Apache-2.0
@@ -27,6 +27,7 @@ pipeline:
       packages: ./cmd/controller-gen
       modroot: .
       output: controller-gen
+      ldflags: -w -X main.version=${{package.version}} -X main.commit=$(git rev-parse HEAD) -X main.date=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
   - uses: strip
 

diff --git a/fq.yaml b/fq.yaml
@@ -1,7 +1,7 @@
 package:
   name: fq
   version: 0.11.0
-  epoch: 2
+  epoch: 3
   description: "jq for binary formats - tool, language and decoders for working with binary and text formats"
   copyright:
     - license: MIT
@@ -18,6 +18,7 @@ pipeline:
       packages: ./
       modroot: .
       output: fq
+      ldflags: -w -X main.version=${{package.version}} -X main.commit=$(git rev-parse HEAD) -X main.date=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
   - uses: strip
 

diff --git a/gcsfuse.yaml b/gcsfuse.yaml
@@ -1,7 +1,7 @@
 package:
   name: gcsfuse
   version: 1.4.2
-  epoch: 5
+  epoch: 6
   description: A user-space file system for interacting with Google Cloud Storage
   copyright:
     - license: Apache-2.0
@@ -26,6 +26,7 @@ pipeline:
       packages: .
       modroot: .
       output: gcsfuse
+      ldflags: -w -X main.version=${{package.version}} -X main.commit=$(git rev-parse HEAD) -X main.date=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
 update:
   enabled: true

diff --git a/gobuster.yaml b/gobuster.yaml
@@ -1,7 +1,7 @@
 package:
   name: gobuster
   version: 3.6.0
-  epoch: 9
+  epoch: 10
   description: "a tool used to brute force attack for URIs, DNS, etc."
   copyright:
     - license: Apache-2.0
@@ -28,6 +28,7 @@ pipeline:
       packages: .
       modroot: .
       output: gobuster
+      ldflags: -w -X main.version=${{package.version}} -X main.commit=$(git rev-parse HEAD) -X main.date=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
   - uses: strip
 

diff --git a/goreleaser-1.18.yaml b/goreleaser-1.18.yaml
@@ -1,7 +1,7 @@
 package:
   name: goreleaser-1.18
   version: 1.18.2
-  epoch: 9
+  epoch: 10
   description: Deliver Go binaries as fast and easily as possible
   copyright:
     - license: Apache-2.0
@@ -26,6 +26,7 @@ pipeline:
       packages: .
       modroot: .
       output: goreleaser
+      ldflags: -w -X main.version=${{package.version}} -X main.commit=$(git rev-parse HEAD) -X main.date=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
 update:
   enabled: true

diff --git a/goreleaser.yaml b/goreleaser.yaml
@@ -1,7 +1,7 @@
 package:
   name: goreleaser
   version: 1.26.0
-  epoch: 1
+  epoch: 2
   description: Deliver Go binaries as fast and easily as possible
   copyright:
     - license: Apache-2.0
@@ -23,6 +23,7 @@ pipeline:
       packages: .
       modroot: .
       output: goreleaser
+      ldflags: -w -X main.version=${{package.version}} -X main.commit=$(git rev-parse HEAD) -X main.date=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
 update:
   enabled: true

diff --git a/nsc.yaml b/nsc.yaml
@@ -1,7 +1,7 @@
 package:
   name: nsc
   version: 2.8.6
-  epoch: 4
+  epoch: 5
   description: Tool for creating nkey/jwt based configurations
   copyright:
     - license: Apache-2.0
@@ -23,6 +23,7 @@ pipeline:
       packages: .
       modroot: .
       output: nsc
+      ldflags: -w -X main.version=${{package.version}} -X main.commit=$(git rev-parse HEAD) -X main.date=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
 update:
   enabled: true

diff --git a/sbom-scorecard.yaml b/sbom-scorecard.yaml
@@ -1,7 +1,7 @@
 package:
   name: sbom-scorecard
   version: 0.0.7
-  epoch: 10
+  epoch: 11
   description: Generate a score for your sbom to understand if it will actually be useful.
   copyright:
     - license: Apache-2.0
@@ -23,6 +23,7 @@ pipeline:
       packages: ./cmd/sbom-scorecard
       modroot: .
       output: sbom-scorecard
+      ldflags: -w -X github.com/eBay/sbom-scorecard.version=${{package.version}} -X github.com/eBay/sbom-scorecard.commit=$(git rev-parse HEAD) -X github.com/eBay/sbom-scorecard.date=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
 update:
   enabled: true

diff --git a/sbomqs.yaml b/sbomqs.yaml
@@ -1,7 +1,7 @@
 package:
   name: sbomqs
   version: 0.1.3
-  epoch: 2
+  epoch: 3
   description: SBOM quality score - Quality metrics for your sboms
   copyright:
     - license: Apache-2.0
@@ -18,6 +18,7 @@ pipeline:
       packages: .
       modroot: .
       output: sbomqs
+      ldflags: -w -X sigs.k8s.io/release-utils/version.gitVersion=${{package.version}} -X sigs.k8s.io/release-utils/version.gitCommit=$(git rev-parse HEAD) -X sigs.k8s.io/release-utils/version.buildDate=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
   - uses: strip
 

diff --git a/slsa-verifier.yaml b/slsa-verifier.yaml
@@ -1,7 +1,7 @@
 package:
   name: slsa-verifier
   version: 2.5.1
-  epoch: 4
+  epoch: 5
   description: Verify provenance from SLSA compliant builders
   copyright:
     - license: Apache-2.0
@@ -23,6 +23,7 @@ pipeline:
       packages: ./cli/slsa-verifier
       modroot: .
       output: slsa-verifier
+      ldflags: -w -X sigs.k8s.io/release-utils/version.gitVersion=${{package.version}} -X sigs.k8s.io/release-utils/version.gitCommit=$(git rev-parse HEAD) -X sigs.k8s.io/release-utils/version.buildDate=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
 update:
   enabled: true

diff --git a/supercronic.yaml b/supercronic.yaml
@@ -1,7 +1,7 @@
 package:
   name: supercronic
   version: 0.2.29
-  epoch: 5
+  epoch: 6
   description: Cron for containers
   copyright:
     - license: MIT
@@ -26,6 +26,7 @@ pipeline:
       packages: .
       modroot: .
       output: supercronic
+      ldflags: -w -X main.version=${{package.version}} -X main.commit=$(git rev-parse HEAD) -X main.date=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
   - uses: strip
 

diff --git a/vexctl.yaml b/vexctl.yaml
@@ -1,7 +1,7 @@
 package:
   name: vexctl
   version: 0.2.6
-  epoch: 4
+  epoch: 5
   description: A tool to create, transform and attest VEX metadata
   copyright:
     - license: Apache-2.0
@@ -18,6 +18,7 @@ pipeline:
       packages: .
       modroot: .
       output: vexctl
+      ldflags: -w -X sigs.k8s.io/release-utils/version.gitVersion=${{package.version}} -X sigs.k8s.io/release-utils/version.gitCommit=$(git rev-parse HEAD) -X sigs.k8s.io/release-utils/version.buildDate=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
   - uses: strip