Why is my "signs" section seemingly ignored?

[jwatte]

I'm trying to call a shell script that in turn calls "notartytool" in a "signs" section.
However, when I run goreleaser release --clean --debug it just prints "* signing artifacts" and nothing else, and doesn't actually call this script.
Log snippet:

  • skipped calculating checksums
  • signing artifacts
  • skipped arch user repositories

Command invocation:
goreleaser release --clean --debug

Actual file:

        builds:
          - binary: observe
            id: observe
            env:
              - CGO_ENABLED=0
            goos:
              - linux
              - windows
            goarch:
              - amd64
            mod_timestamp: "{{.CommitTimestamp}}"
          - binary: observe
            id: observe-macos
            env:
              - CGO_ENABLED=0
            goos:
              - darwin
            goarch:
              - amd64
              - arm64
            mod_timestamp: "{{.CommitTimestamp}}"
            hooks:
              post: codesign --sign A69028128959F0439E6330344FCAD22D6CF8F59F --prefix com.observeinc.developer. --options runtime --timestamp "{{.Path}}"
        archives:
          - format: zip
            files:
            - README.md
            - observe_completions_bash.sh
            wrap_in_directory: true
            strip_parent_binary_folder: true
            rlcp: true
            format_overrides:
              - goos: linux
                format: "tar.gz"
        signs:
          - id: observe-macos-sig
            signature: "${artifact}.sig"
            ids:
              - observe-macos
            cmd: sh
            args:
              - "-c"
              - "s/apple-sign.sh"
              - "${artifact}"
            artifacts: archive
            output: true
        snapshot:
          name_template: "{{ incpatch .Version }}-next"
        
        # yaml-language-server: $schema=https://goreleaser.com/static/schema.json
        # vim: set ts=2 sw=2 tw=0 fo=cnqoj

If I call the script manually for the .zip files afterwards, it works.

[caarlos0]

you're trying to sign an archive with the id observe-macos, but only a binary with that id exists...

You'll probably need to do something like this:

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index 06dee3e..48a367e 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -23,16 +23,26 @@ builds:
       post:
       - echo codesign --sign A69028128959F0439E6330344FCAD22D6CF8F59F --prefix com.observeinc.developer. --options runtime --timestamp "{{.Path}}"
 archives:
-  - format: zip
+  - id: observe-macos
+    builds:
+      - observe-macos
+    format: zip
+    files:
+      - README.md
+      - observe_completions_bash.sh
+    wrap_in_directory: true
+    strip_parent_binary_folder: true
+    rlcp: true
+  - id: observe
+    builds:
+      - observe
+    format: tar.gz
     files:
       - README.md
       - observe_completions_bash.sh
     wrap_in_directory: true
     strip_parent_binary_folder: true
     rlcp: true
-    format_overrides:
-      - goos: linux
-        format: "tar.gz"
 signs:
   - id: observe-macos-sig
     signature: "${artifact}.sig"
@@ -41,6 +51,7 @@ signs:
     cmd: sh
     args:
       - "-c"
+      - "echo"
       - "s/apple-sign.sh"
       - "${artifact}"
     artifacts: archive

(ignore the echos, just testing)

[jwatte]

Thanks for the answer!
It seems a little better error reporting here might have saved a lot of time...