Set fixed version of codesign + upgrade to docker v2

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
This commit is contained in:
Bryan Frimin
2026-02-16 17:41:43 +01:00
parent c9de03ec43
commit 43b44b06bf
3 changed files with 29 additions and 64 deletions

View File

@@ -64,6 +64,10 @@ jobs:
username: ${{ github.actor }} username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }} password: ${{ secrets.GITHUB_TOKEN }}
- uses: sigstore/cosign-installer@053f9b74638557590800a301da1ba82351507e2c # v3.8.1
with:
cosign-release: "v3.0.4"
- name: Run GoReleaser - name: Run GoReleaser
uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a # v6.4.0 uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a # v6.4.0
with: with:

View File

@@ -78,17 +78,29 @@ signs:
artifacts: checksum artifacts: checksum
output: true output: true
docker_manifests: dockers_v2:
- name_template: "ghcr.io/getprobo/probo:{{ .Tag }}" - images:
image_templates: - "ghcr.io/getprobo/probo"
- "ghcr.io/getprobo/probo:{{ .Tag }}-amd64" tags:
- "ghcr.io/getprobo/probo:{{ .Tag }}-arm64" - "{{ .Tag }}"
skip_push: "{{ .IsSnapshot }}" - latest
- name_template: "ghcr.io/getprobo/probo:latest" dockerfile: Dockerfile
image_templates: ids:
- "ghcr.io/getprobo/probo:latest-amd64" - probod-docker
- "ghcr.io/getprobo/probo:latest-arm64" extra_files:
skip_push: "{{ .IsSnapshot }}" - entrypoint.sh
labels:
"org.opencontainers.image.title": "{{.ProjectName}}"
"org.opencontainers.image.description": "Probo compliance management platform"
"org.opencontainers.image.url": "https://github.com/getprobo/probo"
"org.opencontainers.image.source": "https://github.com/getprobo/probo"
"org.opencontainers.image.version": "{{.Version}}"
"org.opencontainers.image.created": '{{time "2006-01-02T15:04:05Z07:00"}}'
"org.opencontainers.image.revision": "{{.FullCommit}}"
"org.opencontainers.image.licenses": "MIT"
platforms:
- linux/amd64
- linux/arm64
docker_signs: docker_signs:
- id: images - id: images
@@ -120,54 +132,6 @@ docker_signs:
cosign sign "${artifact}@${digest}" --yes cosign sign "${artifact}@${digest}" --yes
fi fi
dockers:
- image_templates:
- "ghcr.io/getprobo/probo:{{ .Tag }}-amd64"
- "ghcr.io/getprobo/probo:latest-amd64"
dockerfile: Dockerfile
use: buildx
build_flag_templates:
- "--platform=linux/amd64"
- "--label=org.opencontainers.image.title={{.ProjectName}}"
- "--label=org.opencontainers.image.description=Probo compliance management platform"
- "--label=org.opencontainers.image.url=https://github.com/getprobo/probo"
- "--label=org.opencontainers.image.source=https://github.com/getprobo/probo"
- "--label=org.opencontainers.image.version={{.Version}}"
- '--label=org.opencontainers.image.created={{time "2006-01-02T15:04:05Z07:00"}}'
- "--label=org.opencontainers.image.revision={{.FullCommit}}"
- "--label=org.opencontainers.image.licenses=MIT"
extra_files:
- entrypoint.sh
# Use the Docker-specific build with AMD64 filtering
ids:
- probod-docker
goos: linux
goarch: amd64
skip_push: "{{ .IsSnapshot }}"
- image_templates:
- "ghcr.io/getprobo/probo:{{ .Tag }}-arm64"
- "ghcr.io/getprobo/probo:latest-arm64"
dockerfile: Dockerfile
use: buildx
build_flag_templates:
- "--platform=linux/arm64"
- "--label=org.opencontainers.image.title={{.ProjectName}}"
- "--label=org.opencontainers.image.description=Probo compliance management platform"
- "--label=org.opencontainers.image.url=https://github.com/getprobo/probo"
- "--label=org.opencontainers.image.source=https://github.com/getprobo/probo"
- "--label=org.opencontainers.image.version={{.Version}}"
- '--label=org.opencontainers.image.created={{time "2006-01-02T15:04:05Z07:00"}}'
- "--label=org.opencontainers.image.revision={{.FullCommit}}"
- "--label=org.opencontainers.image.licenses=MIT"
extra_files:
- entrypoint.sh
# Use the Docker-specific build with ARM64 filtering
ids:
- probod-docker
goos: linux
goarch: arm64
skip_push: "{{ .IsSnapshot }}"
changelog: changelog:
sort: asc sort: asc
filters: filters:
@@ -193,7 +157,3 @@ release:
## Docker Images ## Docker Images
- `ghcr.io/getprobo/probo:{{ .Tag }}` (multi-arch: linux/amd64, linux/arm64) - `ghcr.io/getprobo/probo:{{ .Tag }}` (multi-arch: linux/amd64, linux/arm64)
- `ghcr.io/getprobo/probo:latest` (multi-arch: linux/amd64, linux/arm64) - `ghcr.io/getprobo/probo:latest` (multi-arch: linux/amd64, linux/arm64)
### Architecture-specific images
- `ghcr.io/getprobo/probo:{{ .Tag }}-amd64`
- `ghcr.io/getprobo/probo:{{ .Tag }}-arm64`

View File

@@ -11,7 +11,8 @@ RUN useradd -m probo && \
apt-get install -y ca-certificates libcap2-bin && \ apt-get install -y ca-certificates libcap2-bin && \
rm -rf /var/lib/apt/lists/* rm -rf /var/lib/apt/lists/*
COPY probod /usr/local/bin/probod ARG TARGETPLATFORM
COPY $TARGETPLATFORM/probod /usr/local/bin/probod
COPY entrypoint.sh /usr/local/bin/entrypoint.sh COPY entrypoint.sh /usr/local/bin/entrypoint.sh
RUN chmod +x /usr/local/bin/probod && \ RUN chmod +x /usr/local/bin/probod && \