Sign releases and conform release artifacts to terraform requirements

.github/workflows/release.yml

@@ -25,11 +25,18 @@ jobs:
           # Install
           curl -sSL "https://github.com/gotestyourself/gotestsum/releases/download/v0.4.2/gotestsum_0.4.2_linux_amd64.tar.gz" | sudo tar -xz -C /usr/local/bin gotestsum
           curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $(go env GOPATH)/bin v1.25.0
+      - name: Import GPG key
+        id: import_gpg
+        uses: crazy-max/ghaction-import-gpg@v2
+        env:
+          GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
+          PASSPHRASE: ${{ secrets.PASSPHRASE }}
       -
         name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v1
         with:
           version: latest
           args: release --rm-dist
         env:
-          GITHUB_TOKEN: ${{ secrets.token }}
+          GITHUB_TOKEN: ${{ secrets.token }}
+          GPG_FINGERPRINT: ${{ steps.import_gpg.outputs.fingerprint }}

.goreleaser.yml

@@ -9,30 +9,38 @@ builds:
     - CGO_ENABLED=0
   binary: terraform-provider-databricks_{{ .Tag }}
   goos:
-    - darwin
-    - linux
     - windows
+    - linux
+    - darwin
   goarch:
-    - 386
     - amd64
+    - '386'
+    - arm
+    - arm64
+  ignore:
+    - goos: darwin
+      goarch: '386'
 archives:
-- replacements:
-    darwin: macOS
-    linux: Linux
-    windows: Windows
-    amd64: 64-bit
-    386: 32-bit
-  format_overrides:
-    - goos: windows
-      format: zip
+- format: zip
+  name_template: '{{ .ProjectName }}_{{ replace .Version "v" "" }}_{{ .Os }}_{{ .Arch }}'
   files:
     - LICENSE*
     - CHANGELOG*
     - NOTICE*
 checksum:
-  name_template: 'checksums.txt'
+  name_template: '{{ .ProjectName }}_{{ replace .Version "v" "" }}_SHA256SUMS'
+  algorithm: sha256
 snapshot:
   name_template: "{{ .Tag }}"
+signs:
+  - artifacts: checksum
+    args:
+      - "--local-user"
+      - "{{ .Env.GPG_FINGERPRINT }}"
+      - "--output"
+      - "${signature}"
+      - "--detach-sign"
+      - "${artifact}"
 changelog:
   sort: asc
   filters: