Add witness #3604

Author: nicholasdille

renovate.json

@@ -3077,6 +3077,17 @@
       "datasourceTemplate": "github-releases",
       "extractVersionTemplate": "^v(?<version>.+?)$"
     },
+    {
+      "fileMatch": [
+        "^tools/witness/manifest.yaml$"
+      ],
+      "matchStrings": [
+        "version: \"?(?<currentValue>.*?)\"?\\n"
+      ],
+      "depNameTemplate": "testifysec/witness",
+      "datasourceTemplate": "github-releases",
+      "extractVersionTemplate": "^v(?<version>.+?)$"
+    },
     {
       "fileMatch": [
         "^tools/wksctl/manifest.yaml$"

tools/witness/Dockerfile.template

@@ -0,0 +1,17 @@
+#syntax=docker/dockerfile:1.4.3
+
+ARG ref=main
+FROM ghcr.io/nicholasdille/docker-setup/base:${ref} AS prepare
+
+ARG name
+ARG version
+
+# tarball
+RUN <<EOF
+curl --silent --location "https://github.com/testifysec/witness/releases/download/v${version}/witness_${version}_linux_amd64.tar.gz" \
+| tar --extract --gzip --directory="${prefix}${target}/bin/" --no-same-owner \
+    witness
+"${prefix}${target}/bin/witness" completion bash >"${prefix}${target}/share/bash-completion/completions/witness"
+"${prefix}${target}/bin/witness" completion fish >"${prefix}${target}/share/fish/vendor_completions.d/witness.fish"
+"${prefix}${target}/bin/witness" completion zsh >"${prefix}${target}/share/zsh/vendor-completions/_witness"
+EOF

tools/witness/manifest.yaml

@@ -0,0 +1,12 @@
+name: witness
+version: 0.1.11
+check: ${binary} version | cut -d' ' -f2 | cut -d- -f1 | tr -d v
+tags:
+- type/
+- category/security
+homepage: https://github.com/testifysec/witness
+description: Pluggable framework for software supply chain risk management
+renovate:
+  datasource: github-releases
+  package: testifysec/witness
+  extractVersion: ^v(?<version>.+?)$