feat: create binary without OS and arch in name

Previously binaries were created with their architecture and OS included as part of their binary name.

Removing the `binary: scorecard-<linux|darwin|windows>-{{ .Arch }}` line allows us to collapse all of the different build configs into a single universal build that caters for [linux,darwin,windos]*[arm64,amd64]

`- -buildmode=exe` was not needed on the windows builds and was also removed.

closes ossf#4517

Signed-off-by: Tim Sparg <[email protected]>

Author: timothysparg

.goreleaser.yml

@@ -10,9 +10,7 @@ before:
 gomod:
   proxy: true
 builds:
-- id: linux
-  binary: scorecard-linux-{{ .Arch }}
-  no_unique_dist_dir: true
+- id: universal
   flags:
    # trimpath is for reproducible builds
    # remove all file system paths from the resulting executable.
@@ -29,61 +27,12 @@ builds:
   mod_timestamp: '{{ .CommitTimestamp }}'
   goos:
     - linux
-  goarch:
-    - amd64
-    - arm64
-  ldflags:
-    - -s {{.Env.VERSION_LDFLAGS}} 
-
-- id: darwin
-  binary: scorecard-darwin-{{ .Arch }}
-  no_unique_dist_dir: true
-  flags:
-   # trimpath is for reproducible builds
-   # remove all file system paths from the resulting executable.
-   # Instead of absolute file system paths, the recorded file names
-   # will begin with either "go" (for the standard library),
-   # or a module path@version (when using modules),
-   # or a plain import path (when using GOPATH).
-      - -trimpath
-      - -tags=netgo
-  # Set the modified timestamp on the output binary, typically
-  # you would do this to ensure a build was reproducible. Pass
-  # empty string to skip modifying the output.
-  # Default is empty string.
-  mod_timestamp: '{{ .CommitTimestamp }}'
-  goos:
     - darwin
-  goarch:
-    - amd64
-    - arm64
-  ldflags:
-    - -s {{.Env.VERSION_LDFLAGS}} 
-
-- id: windows
-  binary: scorecard-windows-{{ .Arch }}
-  no_unique_dist_dir: true
-  flags:
-   # trimpath is for reproducible builds
-   # remove all file system paths from the resulting executable.
-   # Instead of absolute file system paths, the recorded file names
-   # will begin with either "go" (for the standard library),
-   # or a module path@version (when using modules),
-   # or a plain import path (when using GOPATH).
-      - -trimpath
-      - -tags=netgo
-  # Set the modified timestamp on the output binary, typically
-  # you would do this to ensure a build was reproducible. Pass
-  # empty string to skip modifying the output.
-  # Default is empty string.
-  mod_timestamp: '{{ .CommitTimestamp }}'
-  goos:
     - windows
   goarch:
     - amd64
     - arm64
   ldflags:
-    - -buildmode=exe
     - -s {{.Env.VERSION_LDFLAGS}} 
 
 checksum: