You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Set the release version in the source code.
An alternative to setting the version directly in source code is to get
package repositories to build their osv-scanner with goreleaser instead
of go directly. While goreleaser is often already in most repositories,
it is not as straightforward:
- Package repositories sometimes have their own guidelines for how to
build go, e.g. Arch Linux go binaries must be built with hardened
options which we currently do not do with goreleaser.
- goreleaser also expects to be in a git repository (to get version
tags), but most build systems prefers downloading the source code in a
tarball instead of checking out the repository.
0 commit comments