🌱 remove OS and Arch info from scorecard release binary name (#4520)

* feat: create binary without OS and arch in name

Previously binaries were created with their architecture and OS included as part of their binary name.

Removing the `binary: scorecard-<linux|darwin|windows>-{{ .Arch }}` line allows us to collapse all of the different build configs into a single universal build that caters for [linux,darwin,windos]*[arm64,amd64]

`- -buildmode=exe` was not needed on the windows builds and was also removed.

closes #4517

Signed-off-by: Tim Sparg <[email protected]>

* fix: resolve name_template deprecation

As per https://goreleaser.com/deprecations#snapshotname_template `snapshot.name_template` has been replaced with `snapshot.version_template`

Signed-off-by: Tim Sparg <[email protected]>

---------

Signed-off-by: Tim Sparg <[email protected]>

Author: timothysparg

.goreleaser.yml

@@ -10,9 +10,7 @@ before:
 gomod:
   proxy: true
 builds:
-- id: linux
-  binary: scorecard-linux-{{ .Arch }}
-  no_unique_dist_dir: true
+- id: universal
   flags:
    # trimpath is for reproducible builds
    # remove all file system paths from the resulting executable.
@@ -29,61 +27,12 @@ builds:
   mod_timestamp: '{{ .CommitTimestamp }}'
   goos:
     - linux
-  goarch:
-    - amd64
-    - arm64
-  ldflags:
-    - -s {{.Env.VERSION_LDFLAGS}} 
-
-- id: darwin
-  binary: scorecard-darwin-{{ .Arch }}
-  no_unique_dist_dir: true
-  flags:
-   # trimpath is for reproducible builds
-   # remove all file system paths from the resulting executable.
-   # Instead of absolute file system paths, the recorded file names
-   # will begin with either "go" (for the standard library),
-   # or a module path@version (when using modules),
-   # or a plain import path (when using GOPATH).
-      - -trimpath
-      - -tags=netgo
-  # Set the modified timestamp on the output binary, typically
-  # you would do this to ensure a build was reproducible. Pass
-  # empty string to skip modifying the output.
-  # Default is empty string.
-  mod_timestamp: '{{ .CommitTimestamp }}'
-  goos:
     - darwin
-  goarch:
-    - amd64
-    - arm64
-  ldflags:
-    - -s {{.Env.VERSION_LDFLAGS}} 
-
-- id: windows
-  binary: scorecard-windows-{{ .Arch }}
-  no_unique_dist_dir: true
-  flags:
-   # trimpath is for reproducible builds
-   # remove all file system paths from the resulting executable.
-   # Instead of absolute file system paths, the recorded file names
-   # will begin with either "go" (for the standard library),
-   # or a module path@version (when using modules),
-   # or a plain import path (when using GOPATH).
-      - -trimpath
-      - -tags=netgo
-  # Set the modified timestamp on the output binary, typically
-  # you would do this to ensure a build was reproducible. Pass
-  # empty string to skip modifying the output.
-  # Default is empty string.
-  mod_timestamp: '{{ .CommitTimestamp }}'
-  goos:
     - windows
   goarch:
     - amd64
     - arm64
   ldflags:
-    - -buildmode=exe
     - -s {{.Env.VERSION_LDFLAGS}} 
 
 checksum:
@@ -93,7 +42,7 @@ checksum:
   name_template: "{{ .ProjectName }}_checksums.txt"
 
 snapshot:
-  name_template: SNAPSHOT-{{ .ShortCommit }}
+  version_template: SNAPSHOT-{{ .ShortCommit }}
 changelog:
   # Set it to true if you wish to skip the changelog generation.
   # This may result in an empty release notes on GitHub/GitLab/Gitea.

tools/go.mod

@@ -1,6 +1,7 @@
 module github.com/ossf/scorecard/tools
 
-go 1.23.0
+go 1.23.4
+
 toolchain go1.23.6
 
 require (