stackrox / kube-linter

KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best practices.
https://docs.kubelinter.io/
Apache License 2.0
2.83k stars 228 forks source link

chore: release with goreleaser #720

Closed janisz closed 4 months ago

janisz commented 5 months ago

Using goreleaser will help us with releasing on different platforms. This PR make it working like we used to have. In next PRs I'd like to add arm and if we like other platform support.

Tested: https://github.com/janisz/kube-linter/releases/tag/v0.7.21

cosign verify  ghcr.io/janisz/kube-linter:latest  --certificate-identity-regexp=.+ --cer
tificate-oidc-issuer-regexp=.+

Verification for ghcr.io/janisz/kube-linter:latest --
The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - Existence of the claims in the transparency log was verified offline
  - The code-signing certificate was verified using trusted certificate authority certificates

[{"critical":{"identity":{"docker-reference":"ghcr.io/janisz/kube-linter"},"image":{"docker-manifest-digest":"sha256:c9ca9745779e59dace1f41ffa0e0a095ec2f21bba3be12812115a4a4bd0bd441"},"type":"cosign container image signature"},"optional":{"1.3.6.1.4.1.57264.1.1":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.2":"push","1.3.6.1.4.1.57264.1.3":"a56cb5b11f5ba3f691502f30cee2c810268c92d7","1.3.6.1.4.1.57264.1.4":"Release kube-linter","1.3.6.1.4.1.57264.1.5":"janisz/kube-linter","1.3.6.1.4.1.57264.1.6":"refs/tags/v0.7.21","Bundle":{"SignedEntryTimestamp":"MEQCICEh0ldsmpTKcmNtY0fYoMyyAxaxZl3I9BvZkXtcMJ2WAiAuBCePtyqcHnh2njguTfu2FCwFwfavBu4G4CGS+Q6AVA==","Payload":{"body":"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","integratedTime":1708096588,"logIndex":71843182,"logID":"c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d"}},"Issuer":"https://token.actions.githubusercontent.com","Subject":"https://github.com/janisz/kube-linter/.github/workflows/release.yaml@refs/tags/v0.7.21","githubWorkflowName":"Release kube-linter","githubWorkflowRef":"refs/tags/v0.7.21","githubWorkflowRepository":"janisz/kube-linter","githubWorkflowSha":"a56cb5b11f5ba3f691502f30cee2c810268c92d7","githubWorkflowTrigger":"push"}}]
codecov[bot] commented 4 months ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

:exclamation: No coverage uploaded for pull request base (main@9ba3ac7). Click here to learn what that means.

Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #720 +/- ## ======================================= Coverage ? 72.36% ======================================= Files ? 45 Lines ? 1936 Branches ? 0 ======================================= Hits ? 1401 Misses ? 421 Partials ? 114 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.