Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Conversation

@cjnosal
Copy link
Contributor

@cjnosal cjnosal commented Aug 19, 2021

goreleaser added support for a gomod.proxy configuration stanza in v0.162.0

The docs indicate --snapshot will ignore the setting so the flag is replaced with the implied --skip-publish --skip-validate --skip-announce.

I looked into adding an explicit proxy config into .goreleaser.yaml, but it appears the goreleaser cli doesn't allow for dynamic overrides. --config is repeatable, but the second file replaces the config instead of merging.

make bootstrap build should behave the same, but these changes allow for:

`
make bootstrap

echo "gomod:
proxy: true
env:

  • GOPROXY=myproxy.com" >> .goreleaser.yaml

make build
`

Signed-off-by: Conor Nosal [email protected]

@cjnosal
Copy link
Contributor Author

cjnosal commented Aug 19, 2021

The test is failing because the runner checks out the repo with no-tags , and goreleaser release expects a tag to be present for non-snapshot builds.

Without fully knowing how you use make snapshot internally, would it be reasonable for that task to invoke goreleaser build instead of goreleaser release? Or update make build to invoke goreleaser build instead of snapshot ?

@wagoodman
Copy link
Contributor

wagoodman commented Sep 14, 2021

@xtreme-conor-nosal using goreleaser build is a great idea --I pushed your suggestion to the branch.

Additionally I rebased your branch from the latest on main and bumped to the version of goreleaser to the latest version as of today (the buildx change is from a deprecation warning I got from the latest update).

Copy link
Contributor

@wagoodman wagoodman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the update! Shout out if the adjustments I made negatively affect your use case and we can adjust.

@wagoodman wagoodman merged commit 1c3605d into anchore:main Oct 1, 2021
spiffcs added a commit that referenced this pull request Oct 1, 2021
* main:
  Support gomod configuration in goreleaser (#391)
  Update description for Slack link (#439)
  Updates approach for epoch handling in rpm comparisons (#438)
  Feature: Specifying ignore rules for vulnerability matches (#430)
  Update Syft to v0.24.1 (#433)
  pull in grype-db default language namespace namer + fix imbalanced version v prefixes (#434)
  add stock matcher (language + cpe matching) (#432)
  Add SBOM to releases (#429)
  Add announcement for KubeCon meetup (#428)
  Improve log message for CPE parsing error (#426)
  Bugfixes + Integration test for sbom input vs grype library comparison (#424)
  Allow CPE parsing failures (#425)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants