synackd / ochami / 40529735128
93%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 207
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 92.635%. Remained the same
40529735128

push

github

web-flow 
build(goreleaser): use dockers_v2 for container releases (#223)

Replace the deprecated dockers and docker_manifests sections with one
dockers_v2 Buildx configuration so GoReleaser builds and publishes the
Linux amd64 and arm64 manifest together.

Copy the prebuilt binary from TARGETPLATFORM/ochami into /usr/bin and
update the container command accordingly. Select baseline amd64 v1 and
arm64 v8.0 binaries to avoid requiring amd64 v3 CPUs. Preserve the current
license path, pull behavior, PR tag isolation, latest tag, and unprefixed
release aliases. Add prefixed version aliases for consistent version
tagging and OCI source, description, and license labels for image metadata.

Enable ARM64 emulation before configuring Buildx in both workflows so the
Wolfi package installation can run for either target architecture. Use
snapshot releases for fork PRs because dockers_v2 builds during publishing
and --skip=publish would also skip container validation. Keep fork images
local while allowing same-repository PR builds to publish their PR tags.

Select the release tag's Docker Image artifact explicitly for provenance
attestation. Reject missing, malformed, or conflicting digests instead of
using the first artifact with a digest, so the attestation identifies the
intended multi-platform container.

Document the GoReleaser 2.12 minimum, Buildx requirements, snapshot tag
suffixes, and platform selection. Clarify that CONTAINER_PROG configures
make container and does not select GoReleaser's container runtime.

Validate the configuration with GoReleaser 2.19.0, parse both workflows,
and exercise valid and invalid attestation digest selection. Build all
nine binaries and archives and twelve Linux packages in a snapshot with
Docker skipped. Leave actual image build and runtime validation to CI
because the local Docker daemon is unavailable.

Signed-off-by: Devon Bautista <17506592+synackd@users.noreply.github.com>

12955 of 13985 relevant lines covered (92.63%)

556.72 hits per line

Jobs
ID Job ID Ran Files Coverage
1 40529735128.1 207
92.63
GitHub Action Run
Source Files on build 40529735128