feat: generate vendor archive for Gentoo packaging (#131)

* feat: generate vendor archive for Gentoo packaging

On release, generate a `_vendor.tar.xz` archive, so a Gentoo package can
use proper vendoring without using third party repository or other sources.

Resolves #125

References:
- #125
- gentoo/guru@23487b9#commitcomment-142489696
- https://wiki.gentoo.org/wiki/Writing_go_Ebuilds

Signed-off-by: Victoria Nadasdi <victoria@efertone.me>

* sign all artifacts

Signed-off-by: Victoria Nadasdi <victoria@efertone.me>

---------

Signed-off-by: Victoria Nadasdi <victoria@efertone.me>

Author: yitsushi

.github/workflows/release.yaml

@@ -26,6 +26,9 @@ jobs:
         with:
           gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
           passphrase: ${{ secrets.GPG_PASSPHRASE }}
+      - name: Create vendor directory
+        run: |
+          go mod vendor
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v5
         with:

.gitignore

@@ -3,3 +3,4 @@ totp-cli
 coverage.out
 .idea
 dist/
+vendor/

.goreleaser.yaml

@@ -29,6 +29,21 @@ archives:
     format_overrides:
       - goos: windows
         format: zip
+  - id: vendor-package
+    format: tar.xz
+    meta: true
+    name_template: "{{ .ProjectName }}_vendor"
+    files:
+      - vendor/*
+      - vendor/**/*
+
+    # That's sad:
+    # This feature is only available in GoReleaser Pro.
+    #   hooks:
+    #     before:
+    #       - go mod vendor
+    #     after:
+    #       - rm -rf vendor
 
 changelog:
   sort: asc
@@ -38,7 +53,7 @@ changelog:
       - "^test:"
 
 signs:
-  - artifacts: checksum
+  - artifacts: all
     cmd: gpg2
     args:
       - "--batch"