From d1df4f8dcbb855a9d4144933302802a3c9b8ceb1 Mon Sep 17 00:00:00 2001
From: Bas Steins <sebst@users.noreply.github.com>
Date: Thu, 26 Sep 2024 12:59:51 +0200
Subject: [PATCH 1/2] +smallstep.com/cli

---
 projects/smallstep.com/cli/package.yml | 34 ++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)
 create mode 100644 projects/smallstep.com/cli/package.yml

diff --git a/projects/smallstep.com/cli/package.yml b/projects/smallstep.com/cli/package.yml
new file mode 100644
index 0000000000..cfd05cb082
--- /dev/null
+++ b/projects/smallstep.com/cli/package.yml
@@ -0,0 +1,34 @@
+# vendored
+# distributable:
+#   url: git+https://github.com/smallstep/cli
+#   ref: v{{version}}
+
+warnings:
+  - vendored
+
+versions:
+  github: smallstep/cli/tags
+  strip: /^v/
+
+provides:
+  - bin/step
+
+build:
+  dependencies:
+    curl.se: '*'
+    gnu.org/tar: '*'
+  working-directory: ${{prefix}}/bin
+  script:
+    - curl -L "https://github.com/smallstep/cli/releases/download/{{version.tag}}/step_${PLATFORM}_${ARCH}.tar.gz" | tar zxf -
+    - mv step_${PLATFORM}_${ARCH}/bin/step step
+    - rm -rf step_${PLATFORM}_${ARCH} # TODO: Shell completions
+  env:
+    CGO_ENABLED: 0
+    darwin/aarch64: {PLATFORM: darwin, ARCH: arm64}
+    darwin/x86-64:  {PLATFORM: darwin, ARCH: amd64}
+    linux/aarch64:  {PLATFORM: linux, ARCH: arm64}
+    linux/x86-64:   {PLATFORM: linux, ARCH: amd64}
+
+test:
+  script:
+    - step version | grep -q {{version}}

From 473970767e3cf3eb1b81216e17f9f2289a6181d1 Mon Sep 17 00:00:00 2001
From: Bas Steins <sebst@users.noreply.github.com>
Date: Sun, 29 Sep 2024 15:50:49 +0000
Subject: [PATCH 2/2] build from source (wip)

---
 projects/smallstep.com/cli/package.yml | 43 +++++++++++++++-----------
 1 file changed, 25 insertions(+), 18 deletions(-)

diff --git a/projects/smallstep.com/cli/package.yml b/projects/smallstep.com/cli/package.yml
index cfd05cb082..c0f8de565c 100644
--- a/projects/smallstep.com/cli/package.yml
+++ b/projects/smallstep.com/cli/package.yml
@@ -1,10 +1,6 @@
-# vendored
-# distributable:
-#   url: git+https://github.com/smallstep/cli
-#   ref: v{{version}}
-
-warnings:
-  - vendored
+distributable:
+  url: git+https://github.com/smallstep/cli
+  ref: v{{version}}
 
 versions:
   github: smallstep/cli/tags
@@ -13,21 +9,32 @@ versions:
 provides:
   - bin/step
 
+
 build:
   dependencies:
-    curl.se: '*'
-    gnu.org/tar: '*'
-  working-directory: ${{prefix}}/bin
+    go.dev: ^1.22
   script:
-    - curl -L "https://github.com/smallstep/cli/releases/download/{{version.tag}}/step_${PLATFORM}_${ARCH}.tar.gz" | tar zxf -
-    - mv step_${PLATFORM}_${ARCH}/bin/step step
-    - rm -rf step_${PLATFORM}_${ARCH} # TODO: Shell completions
+    go build $ARGS -ldflags="$LDFLAGS" ./cmd/step
   env:
-    CGO_ENABLED: 0
-    darwin/aarch64: {PLATFORM: darwin, ARCH: arm64}
-    darwin/x86-64:  {PLATFORM: darwin, ARCH: amd64}
-    linux/aarch64:  {PLATFORM: linux, ARCH: arm64}
-    linux/x86-64:   {PLATFORM: linux, ARCH: amd64}
+    darwin/aarch64: {PLATFORM: darwin_arm64, GOARCH: arm64, GOOS: darwin}
+    darwin/x86-64:  {PLATFORM: darwin_amd64_v1, GOARCH: amd64, GOOS: darwin}
+    linux/aarch64:  {PLATFORM: linux_arm64, GOARCH: arm64, GOOS: linux}
+    linux/x86-64:   {PLATFORM: linux_amd64_v1, GOARCH: amd64, GOOS: linux}
+    COMMIT: $(git describe --always --abbrev=8 --dirty)
+    DATE: $(date -u +%FT%TZ)
+    ARGS:
+      - -trimpath
+      - -o={{prefix}}/bin/syft
+    linux:
+      ARGS:
+        - -buildmode=pie
+    LDFLAGS:
+      - -s
+      - -w
+      - -X main.version={{version}}
+      - -X main.gitCommit=${COMMIT}
+      - -X main.buildDate=${DATE}
+
 
 test:
   script: