GoReleaser

.circleci/config.yml

@@ -0,0 +1,50 @@
+version: 2.1
+jobs:
+  release:
+    docker:
+      - image: circleci/golang:1.13
+    steps:
+      - checkout
+      - run: curl -sL https://git.io/goreleaser | bash
+  build:
+    docker:
+      - image: circleci/golang:1.13
+        environment:
+          GO111MODULE: "on"
+          TEST_RESULTS: /tmp/test-results
+    working_directory: /go/src/github.com/sonatype-nexus-community/nancy
+    steps:
+      - checkout
+      - run: mkdir -p $TEST_RESULTS/gotest
+      - restore_cache:
+          keys:
+            - go-mod-v1-{{ checksum "go.sum" }}
+      - run: go mod download
+      - run: go mod tidy
+      - run: go get -u github.com/jstemmer/go-junit-report
+      - run: go test ./... -v 2>&1 | go-junit-report > $TEST_RESULTS/gotest/report.xml
+      - run: go build 
+      - run: cd testdata/dep && ../../nancy Gopkg.lock && cd -
+      - run: ./nancy go.sum
+      - run: go list -m all | ./nancy
+      - save_cache:
+          key: go-mod-v1-{{ checksum "go.sum" }}
+          paths:
+            - "/go/pkg/mod"
+      - store_artifacts:
+          path: /tmp/test-results/
+      - store_test_results:
+          path: /tmp/test-results/
+
+
+workflows:
+  version: 2
+  build_and_release:
+    jobs:
+      - build
+      - release:
+          filters:
+            branches:
+              ignore: /.*/
+            tags:
+              only: /v[0-9]+(\.[0-9]+)*(-.*)*/

.gitignore

@@ -5,3 +5,4 @@ nancy
 #IntelliJ
 .idea
 *.iml
+dist/

.goreleaser.yml

@@ -0,0 +1,43 @@
+before:
+  hooks:
+    - go mod download
+    - go mod tidy
+builds:
+  -
+    ldflags:
+      - -s -w -X "github.com/sonatype-nexus-community/nancy/buildversion.BuildVersion={{.Version}}"
+      - -s -w -X "github.com/sonatype-nexus-community/nancy/buildversion.BuildTime={{time "2006-01-02T15:04:05Z07:00"}}"
+      - -s -w -X "github.com/sonatype-nexus-community/nancy/buildversion.BuildCommit={{.FullCommit}}"
+    env:
+      - CGO_ENABLED=0
+    goos:
+      - linux
+      - darwin
+      - windows
+    goarch:
+      - amd64
+      - 386
+
+archives:
+  - 
+    name_template: "{{ .ProjectName }}-{{ .Os }}.{{ .Arch }}-v{{ .Version }}"
+    format: binary
+
+checksum:
+  name_template: "{{ .ProjectName }}checksums.txt"
+  algorithm: sha256
+
+snapshot:
+  name_template: "{{ .Tag }}-next-{{.FullCommit}}"
+
+changelog:
+  sort: asc
+  filters:
+    exclude:
+    - '^docs:'
+    - '^test:'
+
+release:
+  github:
+    owner: sonatype-nexus-community
+    name: nancy

README.md

@@ -3,9 +3,8 @@
 </p>
 
 <p align="center">
-    <a href="https://gitter.im/sonatype-nexus-community/nancy?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge">
-    <img src="https://badges.gitter.im/sonatype-nexus-community/nancy.svg" alt="Gitter"></img></a>
-    <a href="https://travis-ci.org/sonatype-nexus-community/nancy"><img src="https://travis-ci.org/sonatype-nexus-community/nancy.svg?branch=master" alt="Build Status"></img></a>
+    <a href="https://circleci.com/gh/sonatype-nexus-community/nancy"><img src="https://circleci.com/gh/sonatype-nexus-community/nancy.svg?style=svg" alt="Circle CI Build Status"></img></a>
+    <a href="https://gitter.im/sonatype-nexus-community/nancy?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge"><img src="https://badges.gitter.im/sonatype-nexus-community/nancy.svg" alt="Gitter"></img></a>
 </p>
 
 # Nancy
@@ -257,6 +256,8 @@ Count,Package,Is Vulnerable,Num Vulnerabilities,Vulnerabilities
 
 You can see an example of using `nancy` in Travis-CI at [this intentionally vulnerable repo we made](https://github.com/sonatype-nexus-community/intentionally-vulnerable-golang-project).
 
+Nancy as well runs on it self (delicious dog food!) in CircleCI, in a myriad of fashions. You can see how we do that here in [our repo's CircleCI config](https://github.com/sonatype-nexus-community/nancy/blob/master/.circleci/config.yml).
+
 ### DISCLAIMER
 
 A portion of the golang ecosystem doesn't use proper versions, and instead uses a commit hash to resolve your dependency. Dependencies like this will not work with
@@ -285,11 +286,11 @@ At current time you have a few options:
 
 ### Download release binary
 
-Each commit to master creates a new release binary, and if you'd like to skip building from source, you can download a binary similar to:
+Each tag pushed to this repo creates a new release binary, and if you'd like to skip building from source, you can download a binary similar to:
 
 ```console
 $ curl -o /path/where/you/want/nancy \
-  https://github.com/sonatype-nexus-community/nancy/releases/download/0.0.4/nancy-linux.amd64-0.0.4
+  https://github.com/sonatype-nexus-community/nancy/releases/download/v0.0.44/nancy-darwin.amd64-v0.0.44
 ```
 
 ## Development