ensure released binary is reproducible

capnspacehook · Oct 24, 2022 · b5e900f · b5e900f
1 parent 70dd4e0
commit b5e900f
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -38,7 +38,15 @@ jobs:
         with:
           distribution: goreleaser
           version: latest
-          args: release --rm-dist
+          args: release
+
+      - run: |
+          REPO="${{ github.repository }}"
+          REPO_NAME="${REPO#*/}"
+          ORIG_BIN="dist/${REPO_NAME}_linux_amd64_v1/${REPO_NAME}"
+
+          go install github.com/capnspacehook/gorepro@latest
+          gorepro -b=-buildmode=pie -no-go-gc $ORIG_BIN
 
   release-image:
     runs-on: ubuntu-latest