chore(reproducibility): add buildid= and trimpath

Signed-off-by: Batuhan Apaydın <[email protected]>
anchore · Feb 24, 2022 · b7fd314 · b7fd314
1 parent 598af89
commit b7fd314
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 0 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -140,6 +140,7 @@ jobs:
           # used during macOS notarization
           AC_USERNAME: ${{ secrets.ENG_CI_APPLE_ID }}
           AC_PASSWORD: ${{ secrets.ENG_CI_APPLE_ID_PASS }}
+          GOPATH: ${{ env.GOPATH }}
 
       - uses: anchore/sbom-action@v0
         continue-on-error: true

diff --git a/.github/workflows/validations.yaml b/.github/workflows/validations.yaml
@@ -180,6 +180,8 @@ jobs:
 
       - name: Build snapshot artifacts
         run: make snapshot
+        env:
+           GOPATH: ${{ env.GOPATH }}
 
       - uses: actions/upload-artifact@v2
         with:

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
@@ -22,7 +22,10 @@ builds:
     mod_timestamp: &build-timestamp '{{ .CommitTimestamp }}'
     env: &build-env
       - CGO_ENABLED=0
+    gcflags:
+      - -trimpath={{.Env.GOPATH}}
     ldflags: &build-ldflags |
+      -buildid=
       -w
       -s
       -extldflags '-static'