Use goreleaser

Author: brianm

.github/workflows/release.yml

@@ -0,0 +1,28 @@
+name: release
+on:
+  push:
+    tags:
+      - "v*"
+
+permissions:
+  contents: write
+
+jobs:
+  goreleaser:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - uses: actions/setup-go@v5
+        with:
+          go-version: stable
+
+      - uses: goreleaser/goreleaser-action@v6
+        with:
+          version: "~> v2"
+          args: release --clean
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          HOMEBREW_TAP_GITHUB_TOKEN: ${{ secrets.EPITHET_BOT_TOKEN }}

.goreleaser.yaml

@@ -0,0 +1,52 @@
+version: 2
+project_name: epithet
+
+builds:
+  - id: epithet
+    main: ./cmd/epithet
+    binary: epithet
+    env:
+      - CGO_ENABLED=0
+    goos:
+      - linux
+      - darwin
+      - freebsd
+    goarch:
+      - amd64
+      - arm64
+    ldflags:
+      - -s -w
+      - -X main.version={{.Version}}
+      - -X main.commit={{.ShortCommit}}
+      - -X main.date={{.Date}}
+
+archives:
+  - format: tar.gz
+    name_template: "{{ .ProjectName }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}"
+
+checksum:
+  name_template: checksums.txt
+  algorithm: sha256
+
+changelog:
+  sort: asc
+  filters:
+    exclude:
+      - "^docs:"
+      - "^test:"
+      - "^chore:"
+
+brews:
+  - repository:
+      owner: epithet-ssh
+      name: homebrew-tap
+    homepage: https://github.com/epithet-ssh/epithet
+    description: SSH certificate authority that makes SSH certificates easy to use
+    license: Apache-2.0
+    install: |
+      bin.install "epithet"
+
+release:
+  github:
+    owner: epithet-ssh
+    name: epithet

.tasks/closed/aj153x3d.md

@@ -0,0 +1,26 @@
+---
+title: Set up GoReleaser for automated releases
+id: aj153x3d
+created: 2025-12-05T04:42:20.683644Z
+updated: 2025-12-05T04:43:49.452466Z
+author: Brian McCallister
+priority: high
+tags:
+- feature
+---
+
+---
+## Log
+
+---
+# Log: 2025-12-05T04:42:20Z Brian McCallister
+
+Created task.
+---
+# Log: 2025-12-05T04:42:25Z Brian McCallister
+
+Started working.
+---
+# Log: 2025-12-05T04:43:49Z Brian McCallister
+
+Closed: GoReleaser setup complete: .goreleaser.yaml, release workflow, version flag

Makefile

@@ -23,6 +23,14 @@ clean-all: clean
 	go clean -cache
 	go clean -modcache
 
+.PHONY: release-dry-run
+release-dry-run:	## test release locally without publishing
+	goreleaser release --snapshot --clean --skip=publish
+
+.PHONY: snapshot
+snapshot:		## build snapshot binaries
+	goreleaser build --snapshot --clean
+
 .PHONY: help
 help:			## Show this help.
 	@fgrep -h "##" $(MAKEFILE_LIST) | fgrep -v fgrep | sed -e 's/\\$$//' | sed -e 's/##//'

cmd/epithet/main.go

@@ -14,7 +14,14 @@ import (
 	"github.com/lmittmann/tint"
 )
 
+var (
+	version = "dev"
+	commit  = "none"
+	date    = "unknown"
+)
+
 var cli struct {
+	Version kong.VersionFlag `short:"V" help:"Print version information"`
 	Verbose int             `short:"v" type:"counter" help:"Increase verbosity (-v for debug, -vv for trace)"`
 	LogFile string          `name:"log-file" help:"Path to log file (supports ~ expansion)" env:"EPITHET_LOG_FILE"`
 	Config  kong.ConfigFlag `help:"Path to config file"`
@@ -52,7 +59,10 @@ func main() {
 		os.Exit(1)
 	}
 
-	ktx := kong.Parse(&cli, kong.Resolvers(&cueResolver{value: unifiedConfig}))
+	ktx := kong.Parse(&cli,
+		kong.Vars{"version": version + " (" + commit + ", " + date + ")"},
+		kong.Resolvers(&cueResolver{value: unifiedConfig}),
+	)
 	logger := setupLogger()
 
 	// Create TLS config from global flags