Add luet-cosign/cosign to toolchain packages

packages/toolchain/cosign/build.yaml

@@ -0,0 +1,29 @@
+requires:
+  - name: "golang"
+    category: "build"
+    version: ">=0"
+env:
+{{ template "golang_env" }}
+{{if .Values.fips}}
+- CGO_ENABLED=1
+{{ else }}
+- CGO_ENABLED=0
+- LDFLAGS="-s -w"
+{{ end }}
+
+prelude:
+  {{ template "golang_deps" .}}
+  {{ $opts:= dict "version" (printf "v%s" .Values.version) "org" ( index .Values.labels "github.owner" ) "repo" ( index .Values.labels "github.repo" ) }}
+  {{ template "golang_download_package" $opts}}
+steps:
+- |
+    PACKAGE_VERSION=${PACKAGE_VERSION%\-*} && \
+    cd /luetbuild/go/src/github.com/{{ ( index .Values.labels "github.owner" ) }}/{{.Values.name}} && \
+    make {{.Values.name}} && mv {{.Values.name}} /usr/bin/{{.Values.name}}
+{{ if .Values.fips }}
+# Check that we build with fips
+- go tool nm /usr/bin/{{.Values.name}} | grep '_Cfunc__goboringcrypto_' 1> /dev/null
+{{ end }}
+
+includes:
+  - /usr/bin/{{.Values.name}}

packages/toolchain/cosign/definition.yaml

@@ -0,0 +1,8 @@
+name: "cosign"
+category: "toolchain"
+version: 1.2.1
+labels:
+  github.repo: "cosign"
+  github.owner: "sigstore"
+  autobump.revdeps: "true"
+  autobump.revbump_related: "system/cos recovery/cos recovery/cos-img recovery/cos-squash"

packages/toolchain/luet-cosign/build.yaml

@@ -0,0 +1,27 @@
+requires:
+  - name: "golang"
+    category: "build"
+    version: ">=0"
+  - name: "cosign"
+    category: "toolchain"
+    version: ">=0"
+
+env:
+  - PATH=$PATH:/usr/local/go/bin
+  - GOPATH=/luetbuild/go
+  - GO111MODULE=on
+  - CGO_ENABLED=0
+  - LDFLAGS="-s -w"
+
+prelude:
+{{ template "golang_deps" .}}
+{{ $opts:= dict "version" (printf "v%s" .Values.version) "org" ( index .Values.labels "github.owner" ) "repo" ( index .Values.labels "github.repo" ) }}
+{{ template "golang_download_package" $opts}}
+steps:
+  - |
+    PACKAGE_VERSION=${PACKAGE_VERSION%\-*} && \
+    cd /luetbuild/go/src/github.com/{{ ( index .Values.labels "github.owner" ) }}/{{.Values.name}} && \
+    make build && \
+    mv bin/{{.Values.name}} /usr/bin/{{.Values.name}}
+includes:
+  - /usr/bin/{{.Values.name}}

packages/toolchain/luet-cosign/definition.yaml

@@ -0,0 +1,8 @@
+name: "luet-cosign"
+category: "toolchain"
+version: 0.0.5
+labels:
+  github.repo: "luet-cosign"
+  github.owner: "rancher-sandbox"
+  autobump.revdeps: "true"
+  autobump.revbump_related: "system/cos recovery/cos recovery/cos-img recovery/cos-squash"