使用bundle格式的goreleler签名无法识别、无效或不合适

Question

我正试图使用goreleler对我的golang进行签名，并最终使用Homebrew进行分发。但这需要使用Apple开发者ID进行签名才能分发给MacO。

你看到以下使用gon的错误并修复了吗？

来自这里的yaml样品

# This is an example .goreleaser.yml file with some sane defaults.
# Make sure to check the documentation at http://goreleaser.com
before:
hooks:
# You may remove this if you don't use go modules.
- go mod tidy
# you may remove this if you don't need go generate
- go generate ./...
builds:
- binary: foo
id: foo
goos:
- linux
goarch:
- amd64
# notice that we need a separated build for the MacOS binary only:
- binary: foo
id: appbrew-macos
goos:
- darwin
goarch:
- amd64
hooks:
post: gon gon.hcl

gon.hcl文件

# The path follows a pattern
# ./dist/BUILD-ID_TARGET/BINARY-NAME
source = ["."]
bundle_id = "com.mydomain.mybrew"
apple_id {
username = "<[e-mail]>"
password = "@keychain:developer_id_application"
}
sign {
application_identity = "Developer ID Application: my name (452534542)"
}

我可以验证密码是检索使用：

security find-generic-password -w -s 'developer_id_application' -a '<[e-mail]>'

错误：

• archives         
• creating                  archive=dist/appbrew_0.1.19_Darwin_x86_64.tar.gz
• creating                  archive=dist/appbrew_0.1.19_Darwin_arm64.tar.gz
• creating                  archive=dist/appbrew_0.1.19_Linux_i386.tar.gz
• creating                  archive=dist/appbrew_0.1.19_Linux_x86_64.tar.gz
• creating                  archive=dist/appbrew_0.1.19_Linux_arm64.tar.gz
• creating source archive
• linux packages   
• snapcraft packages
• calculating checksums
• checksumming              file=appbrew_0.1.19_Linux_arm64.tar.gz
• checksumming              file=appbrew_0.1.19_Darwin_arm64.tar.gz
• checksumming              file=appbrew_0.1.19_Linux_x86_64.tar.gz
• checksumming              file=appbrew_0.1.19_Darwin_x86_64.tar.gz
• checksumming              file=appbrew_0.1.19_Linux_i386.tar.gz
• signing artifacts
• signing                   cmd=[gon gon.hcl]
• ==> ✏️  Signing files...
cmd=gon
• ❗️ Error signing files:
error signing:
.: bundle format unrecognized, invalid, or unsuitable
cmd=gon
⨯ release failed after 3.49s error=sign: gon failed

Answer 1

您的配置可能应该类似于：

builds:
- binary: foo
id: foo
goos:
- linux
- windows
goarch:
- amd64
# separated build for macos only
- binary: foo
id: foo-macos
goos:
- darwin
goarch:
- amd64
signs:
- signature: "${artifact}.dmg"
ids:
- foo-macos
cmd: gon
args:
- gon.hcl
artifacts: all

请注意，签名是在signs步骤中完成的，而不是像配置中那样在builds步骤中完成。

更多信息请访问Gon的存储库。