This change includes SBOM manifests for the Authelia backend binaries and frontend React application in CDX and SPDX formats.
This also consolidates all checksums into a single file and signature: `checksums.sha256` and `checksums.sha256.sig`.
Signed-off-by: Amir Zarrinkafsh <nightah@me.com>
This change resolves a failure that occurred in older Debian-based systems when running `systemd-sysusers` to generate the Authelia user.
It also aligns the .deb file output similar to `makedeb` and signs `.deb` files with the Authelia GPG key.
* ci(buildkite): simplify steps and hooks
This change reduces file handling/renaming for the Buildkite steps once GoReleaser has built and created artifacts. GoReleaser will now output files with their expected names for all builds, including tagged releases. Buildkite will utilise said filenames for their respective steps.
This also ensures that Buildkite and GitHub releases all share a filename, which allows the SLSA attestation to use these as-is from the Buildkite API.
Signed-off-by: Amir Zarrinkafsh <nightah@me.com>
* ci: build with goreleaser
* ci: goreleaser for .deb packages
* fix: prune filter for protected containers and update authors label
* fix: goreleaser yaml linter issues
* refactor: small updates
* fix: linting errors
* fix: trailing whitespaces
* refactor: update to final image
This change removes the usage of GOX and uses GoReleaser to build our binaries and archives. All builds, including the musl variants, are now completed in the `authelia/crossbuild` container.
James Elliott