feat(cd): enable SBOM in docker images

.github/workflows/release.yml

@@ -15,16 +15,24 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
 
-        # TODO: signing ?
-      #- uses: sigstore/[email protected]
+      - name: Set up Go
+        uses: actions/setup-go@v5
 
       - uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
       - name: Release
         uses: goreleaser/[email protected]
         with:

.goreleaser.yml

@@ -1,4 +1,5 @@
 version: 2
+project_name: nomad-job-exec
 before:
   hooks:
     - go mod download
@@ -10,8 +11,34 @@ builds:
       - windows
       - darwin
 dockers:
-  - image_templates:
-    - "ghcr.io/edgelaboratories/nomad-job-exec:{{ .Tag }}"
+  - use: buildx
+    image_templates:
+    - "ghcr.io/edgelaboratories/{{ .ProjectName }}:{{ .Tag }}-amd64"
+    build_flag_templates:
+      - "--pull"
+      - "--sbom=true"
+      - "--label=org.opencontainers.image.created={{.Date}}"
+      - "--label=org.opencontainers.image.title={{.ProjectName}}"
+      - "--label=org.opencontainers.image.revision={{.FullCommit}}"
+      - "--label=org.opencontainers.image.version={{.Version}}"
+      - "--label=org.opencontainers.image.source={{.GitURL}}"
+      - "--platform=linux/amd64"
+  - use: buildx
+    image_templates:
+    - "ghcr.io/edgelaboratories/{{ .ProjectName }}:{{ .Tag }}-arm64"
+    build_flag_templates:
+      - "--pull"
+      - "--label=org.opencontainers.image.created={{.Date}}"
+      - "--label=org.opencontainers.image.title={{.ProjectName}}"
+      - "--label=org.opencontainers.image.revision={{.FullCommit}}"
+      - "--label=org.opencontainers.image.version={{.Version}}"
+      - "--label=org.opencontainers.image.source={{.GitURL}}"
+      - "--platform=linux/arm64"
+docker_manifests:
+  - name_template: "ghcr.io/edgelaboratories/{{ .ProjectName }}:{{ .Tag }}"
+    image_templates:
+      - "ghcr.io/edgelaboratories/{{ .ProjectName }}:{{ .Tag }}-amd64"
+      - "ghcr.io/edgelaboratories/{{ .ProjectName }}:{{ .Tag }}-arm64"
 archives:
   - id: binary
     formats: ['binary', 'zip']

go.mod

@@ -1,6 +1,6 @@
 module github.com/edgelaboratories/nomad-job-exec
 
-go 1.23.0
+go 1.23.10
 
 toolchain go1.24.5