Add support for private repos using env var or netrc

Gopkg.toml

@@ -27,7 +27,7 @@
 
 [[constraint]]
   name = "github.com/goreleaser/goreleaser"
-  version = ">=0.66.0"
+  version = ">=0.77.1"
 [prune]
   go-tests = true
   unused-packages = true

main.go

@@ -5,6 +5,7 @@ import (
 	"fmt"
 	"io/ioutil"
 	"net/http"
+	"net/url"
 	"os"
 	"path"
 	"strings"
@@ -17,7 +18,10 @@ import (
 
 	"github.com/apex/log"
 	"github.com/apex/log/handlers/cli"
+	"github.com/bgentry/go-netrc/netrc"
 	"github.com/client9/codegen/shell"
+	"github.com/mitchellh/go-homedir"
+	"golang.org/x/oauth2"
 	"gopkg.in/alecthomas/kingpin.v2"
 )
 
@@ -112,7 +116,7 @@ func loadURLs(path, configPath string) (*config.Project, error) {
 		if file == "" {
 			continue
 		}
-		url := fmt.Sprintf("%s/%s", path, file)
+		url := fmt.Sprintf("%s/%s?ref=master", path, file)
 		log.Infof("reading %s", url)
 		project, err := loadURL(url)
 		if err != nil {
@@ -126,7 +130,16 @@ func loadURLs(path, configPath string) (*config.Project, error) {
 }
 
 func loadURL(file string) (*config.Project, error) {
-	resp, err := http.Get(file)
+	client, err := buildSecureHTTPClient(file)
+	if err != nil {
+		return nil, err
+	}
+	req, err := http.NewRequest("GET", file, nil)
+	if err != nil {
+		return nil, err
+	}
+	req.Header.Set("Accept", "application/vnd.github.raw")
+	resp, err := client.Do(req)
 	if err != nil {
 		return nil, err
 	}
@@ -144,6 +157,46 @@ func loadURL(file string) (*config.Project, error) {
 	return &p, err
 }
 
+func buildSecureHTTPClient(file string) (*http.Client, error) {
+	// Read GITHUB_TOKEN env var
+	token := os.Getenv("GITHUB_TOKEN")
+	if token != "" {
+		return buildHTTPClient(token), nil
+	}
+
+	// Read ~/.netrc login info
+	netrcFile, err := homedir.Expand("~/.netrc")
+	if err != nil {
+		return nil, err
+	}
+	if _, err = os.Stat(netrcFile); !os.IsNotExist(err) {
+		fileURL, err := url.Parse(file)
+		if err != nil {
+			return nil, err
+		}
+		m, err := netrc.FindMachine(netrcFile, fileURL.Host)
+		if err != nil {
+			return nil, err
+		}
+		if m.Password != "" {
+			token = m.Password
+		} else if m.Login != "" {
+			token = m.Login
+		}
+		if token != "" {
+			return buildHTTPClient(token), nil
+		}
+	}
+
+	return http.DefaultClient, nil
+}
+
+func buildHTTPClient(token string) *http.Client {
+	ts := oauth2.StaticTokenSource(&oauth2.Token{AccessToken: token})
+	client := oauth2.NewClient(nil, ts)
+	return client
+}
+
 func loadFile(file string) (*config.Project, error) {
 	p, err := config.Load(file)
 	return &p, err
@@ -158,7 +211,7 @@ func Load(repo, configPath, file string) (project *config.Project, err error) {
 		repo = normalizeRepo(repo)
 		log.Infof("reading repo %q on github", repo)
 		project, err = loadURLs(
-			fmt.Sprintf("https://raw.githubusercontent.com/%s/master", repo),
+			fmt.Sprintf("https://api.github.com/repos/%s/contents", repo),
 			configPath,
 		)
 	} else {

shell_godownloader.go

@@ -71,8 +71,8 @@ parse_args() {
 execute() {
   tmpdir=$(mktmpdir)
   log_debug "downloading files into ${tmpdir}"
-  http_download "${tmpdir}/${TARBALL}" "${TARBALL_URL}"
-  http_download "${tmpdir}/${CHECKSUM}" "${CHECKSUM_URL}"
+  http_download "${tmpdir}/${TARBALL}" "${TARBALL_URL}" "Accept:application/octet-stream"
+  http_download "${tmpdir}/${CHECKSUM}" "${CHECKSUM_URL}" "Accept:application/octet-stream"
   hash_sha256_verify "${tmpdir}/${TARBALL}" "${tmpdir}/${CHECKSUM}"
   {{- if .Archive.WrapInDirectory }}
   srcdir="${tmpdir}/${NAME}"
@@ -185,7 +185,6 @@ log_prefix() {
 	echo "$PREFIX"
 }
 PLATFORM="${OS}/${ARCH}"
-GITHUB_DOWNLOAD=https://github.com/${OWNER}/${REPO}/releases/download
 
 uname_os_check "$OS"
 uname_arch_check "$ARCH"
@@ -205,10 +204,11 @@ adjust_arch
 log_info "found version: ${VERSION} for ${TAG}/${OS}/${ARCH}"
 
 {{ .Archive.NameTemplate }}
+GITHUB_DOWNLOAD=https://api.github.com/repos/${OWNER}/${REPO}/releases/tags/${TAG}
 TARBALL=${NAME}.${FORMAT}
-TARBALL_URL=${GITHUB_DOWNLOAD}/${TAG}/${TARBALL}
+TARBALL_URL=$(curl -n -sL ${GITHUB_DOWNLOAD} | grep -B 3 "\"name\": \"${TARBALL}\"" | grep '"url"' | sed 's/.*"url": "\(.*\)",/\1/')
 {{ .Checksum.NameTemplate }}
-CHECKSUM_URL=${GITHUB_DOWNLOAD}/${TAG}/${CHECKSUM}
+CHECKSUM_URL=$(curl -n -sL ${GITHUB_DOWNLOAD} | grep -B 3 "\"name\": \"${CHECKSUM}\"" | grep '"url"' | sed 's/.*"url": "\(.*\)",/\1/')
 
 
 execute