registry.yaml

packages:
  - type: github_release
    repo_owner: suzuki-shunsuke
    repo_name: cmdx
    description: Task runner. It provides useful help messages and supports interactive prompts and validation of arguments
    asset: cmdx_{{.OS}}_{{.Arch}}.{{.Format}}
    format: tar.gz
    slsa_provenance:
      type: github_release
      asset: multiple.intoto.jsonl
    checksum:
      type: github_release
      asset: cmdx_{{trimV .Version}}_checksums.txt
      algorithm: sha256
      cosign:
        cosign_experimental: true
        opts:
          - --signature
          - https://github.com/suzuki-shunsuke/cmdx/releases/download/{{.Version}}/cmdx_{{trimV .Version}}_checksums.txt.sig
          - --certificate
          - https://github.com/suzuki-shunsuke/cmdx/releases/download/{{.Version}}/cmdx_{{trimV .Version}}_checksums.txt.pem
    version_constraint: semver(">= 1.7.0")
    version_overrides:
      - version_constraint: semver(">= 1.6.1")
        supported_envs:
          - darwin
          - amd64
        rosetta2: true
        slsa_provenance:
          enabled: false
        checksum: &cmdx_checksum_1
          type: github_release
          asset: cmdx_{{trimV .Version}}_checksums.txt
          algorithm: sha256
          cosign:
            enabled: false
      - version_constraint: semver("< 1.6.1")
        asset: cmdx_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}}
        slsa_provenance:
          enabled: false
        checksum: *cmdx_checksum_1
        supported_envs:
          - darwin
          - amd64
        rosetta2: true