cfssl.yaml

package:
  name: cfssl
  version: 1.6.5
  epoch: 11
  description: Cloudflare's PKI and TLS toolkit
  copyright:
    - license: BSD-2-Clause

environment:
  contents:
    packages:
      - busybox
      - ca-certificates-bundle
      - go
      - openssf-compiler-options

pipeline:
  - uses: git-checkout
    with:
      repository: https://github.com/cloudflare/cfssl
      tag: v${{package.version}}
      expected-commit: 96259aa29c9cc9b2f4e04bad7d4bc152e5405dda

  - uses: go/bump
    with:
      deps: google.golang.org/protobuf@v1.33.0 golang.org/x/net@v0.23.0 golang.org/x/crypto@v0.31.0

  - uses: go/build
    with:
      packages: ./cmd/cfssl
      output: cfssl
      ldflags: -s -w -X github.com/cloudflare/cfssl/cli/version.version=${{package.version}}
      vendor: true

data:
  - name: binaries
    items:
      bundle: cfssl-bundle
      certinfo: cfssl-certinfo
      newkey: cfssl-newkey
      scan: cfssl-scan
      json: cfssljson
      mkbundle: mkbundle
      multirootca: multirootca

subpackages:
  - range: binaries
    name: "${{package.name}}-${{range.key}}"
    pipeline:
      - uses: go/build
        with:
          packages: ./cmd/${{range.value}}
          output: ${{range.value}}
          ldflags: -s -w -X github.com/cloudflare/cfssl/cli/version.version=${{package.version}}
          vendor: true
    test:
      pipeline:
        - runs: |
            echo "Testing ${{range.value}}"
            ${{range.value}} -h

update:
  enabled: true
  github:
    identifier: cloudflare/cfssl
    strip-prefix: v

test:
  pipeline:
    - runs: |
        echo "Testing cfssl"
        cfssl -h