Skip to content

Pin GoReleaser to v2.14.3 and fix Docker attestation failure#172

Merged
damoun merged 2 commits intomainfrom
fix/pin-goreleaser-and-buildx
Mar 25, 2026
Merged

Pin GoReleaser to v2.14.3 and fix Docker attestation failure#172
damoun merged 2 commits intomainfrom
fix/pin-goreleaser-and-buildx

Conversation

@damoun
Copy link
Copy Markdown
Owner

@damoun damoun commented Mar 25, 2026

Summary

  • Pin GoReleaser CLI to v2.14.3 in both build and publish workflows (was latest)
  • Add docker/setup-buildx-action to the publish workflow to fix the attestation error: Attestation is not supported for the docker driver

Root cause

The dockers_v2 goreleaser feature adds --attest=type=sbom by default, which requires the docker-container buildx driver. The publish workflow only had setup-qemu-action but was missing setup-buildx-action.

Test plan

  • Build workflow passes on this PR
  • Re-release a tag to verify the publish workflow succeeds

damoun added 2 commits March 25, 2026 10:04
The docker-container buildx driver is required for multi-platform
builds with SBOM attestations. Without it, goreleaser's dockers_v2
fails with "Attestation is not supported for the docker driver."
@damoun damoun self-assigned this Mar 25, 2026
@damoun damoun merged commit 8cdf50d into main Mar 25, 2026
7 checks passed
@damoun damoun deleted the fix/pin-goreleaser-and-buildx branch March 25, 2026 09:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant