.goreleaser.yml

project_name: kics

builds:
  - main: ./cmd/console/main.go
    binary: kics
    goos:
      - darwin
      - linux
      - windows
    goarch:
      - amd64
      - arm64
    ignore:
      - goos: darwin
        goarch: 386
      - goos: linux
        goarm: 7
      - goos: windows
        goarm: 7
    ldflags:
      - -s
      - -w
      - -X github.com/Checkmarx/kics/internal/constants.Version={{ .Version }}
      - -X github.com/Checkmarx/kics/internal/constants.SCMCommit={{ .Commit }}
      - -X github.com/Checkmarx/kics/internal/constants.SentryDSN={{ .Env.SENTRY_DSN }}
      - -X github.com/Checkmarx/kics/internal/constants.BaseURL={{ .Env.DESCRIPTIONS_URL }}
archives:
  - builds: [kics]
    format_overrides:
      - goos: windows
        format: zip
    replacements:
      amd64: x64
      386: x32
    files:
      - LICENSE
      - assets/queries/**/metadata.json
      - assets/queries/**/*.rego
      - assets/libraries
brews:
  - tap:
      owner: checkmarx
      name: homebrew-tap
      token: "{{ .Env.KICS_BOT_PAT }}"
    folder: Formula
    homepage: https://github.com/Checkmarx/kics
    description: Find security vulnerabilities, compliance issues, and infrastructure misconfigurations in your IaC
    license: Apache
    test: |
      system "#{bin}/kics version"
    install: |-
      pkgshare.mkpath
      cp_r "assets", pkgshare
      bin.install "kics"
    custom_block: |
      def caveats
        <<~EOS
          KICS queries are placed under #{pkgshare}/assets/queries

          To use KICS default queries add KICS_QUERIES_PATH env to your ~/.zshrc or ~/.zprofile:
              "echo 'export KICS_QUERIES_PATH=#{pkgshare}/assets/queries' >> ~/.zshrc"

          usage of CLI flag --queries-path takes precedence.
        EOS
      end
release:
  prerelease: true