The release process is regenerating binaries.

[Vad1mo]

The current release process is using goreleaser to make the binaries, on the other hand when we create the images for the harbor-cli, we are rebuilding the binaries. IMO it would make sense to reuse the binaries instead of regenerating them.

• same process
• same signatures and hashes of generated binaries.

[bupd]

It seems we can use goreleaser to create docker images too.

• https://goreleaser.com/customization/docker/
• https://goreleaser.com/customization/sbom/

[bupd]

Also we can use goreleaser to publish to AUR and homebrew too.

[bupd]

I am brainstorming here.

instead of building binaries inside dagger, We can update the Release pipeline to use the binaries generated by the goreleaser and package them into containers created by dagger. so we can use the same sbom. too