Add sbom support (#8)

Signed-off-by: Juraci Paixão Kröhling <juraci@kroehling.de>

distributions/sidecar/.goreleaser.yaml

@@ -128,3 +128,5 @@ docker_manifests:
         - ghcr.io/jpkrohling/otelcol-distributions/sidecar:{{ .Version }}-amd64
         - ghcr.io/jpkrohling/otelcol-distributions/sidecar:{{ .Version }}-arm64
         - ghcr.io/jpkrohling/otelcol-distributions/sidecar:{{ .Version }}-ppc64le
+sboms:
+    - artifacts: archive

distributions/tracing/.goreleaser.yaml

@@ -128,3 +128,5 @@ docker_manifests:
         - ghcr.io/jpkrohling/otelcol-distributions/tracing:{{ .Version }}-amd64
         - ghcr.io/jpkrohling/otelcol-distributions/tracing:{{ .Version }}-arm64
         - ghcr.io/jpkrohling/otelcol-distributions/tracing:{{ .Version }}-ppc64le
+sboms:
+    - artifacts: archive

go.mod

@@ -1,6 +1,8 @@
 module github.com/jpkrohling/otelcol-distributions
 
-go 1.20
+go 1.21
+
+toolchain go1.21.4
 
 require (
 	github.com/goreleaser/goreleaser v1.21.2

go.sum

@@ -6,6 +6,7 @@ github.com/caarlos0/testfs v0.4.4 h1:3PHvzHi5Lt+g332CiShwS8ogTgS3HjrmzZxCm6JCDr8
 github.com/caarlos0/testfs v0.4.4/go.mod h1:bRN55zgG4XCUVVHZCeU+/Tz1Q6AxEJOEJTliBy+1DMk=
 github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
 github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
+github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/gobwas/glob v0.2.3 h1:A4xDbljILXROh+kObIiy5kIaPYD8e96x1tgBhUI5J+Y=
 github.com/gobwas/glob v0.2.3/go.mod h1:d3Ez4x06l9bZtSvzIay5+Yzi0fmZzPgnTbPcKjJAkT8=
 github.com/goreleaser/fileglob v1.3.0 h1:/X6J7U8lbDpQtBvGcwwPS6OpzkNVlVEsFUVRx9+k+7I=
@@ -30,10 +31,12 @@ github.com/matryer/is v1.4.0 h1:sosSmIWwkYITGrxZ25ULNDeKiMNzFSr4V/eqBQP0PeE=
 github.com/matryer/is v1.4.0/go.mod h1:8I/i5uYgLzgsgEloJE1U6xx5HkBQpAZvepWuujKwMRU=
 github.com/pkg/diff v0.0.0-20210226163009-20ebb0f2a09e/go.mod h1:pJLUxLENpZxwdsKMEsNbx1VGcRFpLqf3715MtcvvzbA=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/rogpeppe/go-internal v1.9.0/go.mod h1:WtVeX8xhTBvf0smdhujwtBcq4Qrzq/fJaraNFVN+nFs=
 github.com/rogpeppe/go-internal v1.10.0 h1:TMyTOH3F/DB16zRVcYyreMH6GnZZrwQVAoYjRBZyWFQ=
 github.com/rogpeppe/go-internal v1.10.0/go.mod h1:UQnix2H7Ngw/k4C5ijL5+65zddjncjaFoBhdsK/akog=
 github.com/stretchr/testify v1.8.4 h1:CcVxjf3Q8PM0mHUKJCdn+eZZtm5yQwehR5yeSVQQcUk=
+github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
 github.com/wk8/go-ordered-map/v2 v2.1.8 h1:5h/BUHu93oj4gIdvHHHGsScSTMijfx5PeYkE/fJgbpc=
 github.com/wk8/go-ordered-map/v2 v2.1.8/go.mod h1:5nJHM5DyteebpVlHnWMV0rPz6Zp7+xBAnxjb1X5vnTw=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=

goreleaser/main.go

@@ -51,6 +51,11 @@ func Generate(imagePrefixes []string, dist string) config.Project {
 		NFPMs:           []config.NFPM{Package(dist)},
 		Dockers:         DockerImages(imagePrefixes, dist),
 		DockerManifests: DockerManifest(imagePrefixes, dist),
+		SBOMs: []config.SBOM{
+			{
+				Artifacts: "archive",
+			},
+		},
 	}
 }