From 6541e262cee2cb9c4512f6d091582ff8e8899fbb Mon Sep 17 00:00:00 2001
From: Ayman Bagabas <ayman.bagabas@gmail.com>
Date: Tue, 29 Jul 2025 15:41:09 -0400
Subject: [PATCH] ci: Update GoReleaser config (#338)

* fix(ci): use brew formula instead of cask

* fix(ci): add cosign signing to goreleaser

* fix(ci): release: add workflow secrets

* fix(ci): release: add source sbom

* fix(ci): release: add footer from meta

* fix(ci): release: use homebrew_casks instead of brews
---
 .github/workflows/release.yml |  6 ++++++
 .goreleaser.yml               | 26 ++++++++++++++++++++++++++
 2 files changed, 32 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 892eca091e6ce3088a9e0de68d278863caf1aa36..74a78e9bd844329ed08c155eacd4940e024b66f4 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -24,3 +24,9 @@ jobs:
       nfpm_passphrase: ${{ secrets.NFPM_PASSPHRASE }}
       npm_token: ${{ secrets.NPM_TOKEN }}
       snapcraft_token: ${{ secrets.SNAPCRAFT_TOKEN }}
+      aur_key: ${{ secrets.AUR_KEY }}
+      macos_sign_p12: ${{ secrets.MACOS_SIGN_P12 }}
+      macos_sign_password: ${{ secrets.MACOS_SIGN_PASSWORD }}
+      macos_notary_issuer_id: ${{ secrets.MACOS_NOTARY_ISSUER_ID }}
+      macos_notary_key_id: ${{ secrets.MACOS_NOTARY_KEY_ID }}
+      macos_notary_key: ${{ secrets.MACOS_NOTARY_KEY }}
diff --git a/.goreleaser.yml b/.goreleaser.yml
index 7ae28af01225e5a8d36e14b6f1fbd189874abbfb..da513e32d4d9a6820048490ba32a426e38082b30 100644
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -144,6 +144,26 @@ nfpms:
       - src: ./manpages/crush.1.gz
         dst: /usr/share/man/man1/crush.1.gz
 
+signs:
+  - cmd: cosign
+    certificate: "${artifact}.pem"
+    args:
+      - sign-blob
+      - "--output-certificate=${certificate}"
+      - "--output-signature=${signature}"
+      - "${artifact}"
+      - "--yes"
+    artifacts: checksum
+    output: true
+
+source:
+  enabled: true
+
+sboms:
+  - artifacts: archive
+  - id: source
+    artifacts: source
+
 nix:
   - repository:
       owner: "charmbracelet"
@@ -210,3 +230,9 @@ changelog:
       order: 400
     - title: Other work
       order: 9999
+
+release:
+  prerelease: auto
+  footer:
+    from_url:
+      url: https://raw.githubusercontent.com/charmbracelet/meta/main/footer.md