Automic VaultAutomic Vault

brew

goreleaser を Homebrew, MacPorts, Nix, pacman, zypper, scoop, winget でインストール

goreleaser のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

インストール

追加のインストールコマンド

macOS

Homebrew確認済み · 100%
brew install goreleaser

local Homebrew formula metadata

MacPorts確認済み · 94%
sudo port install goreleaser

MacPorts ports tree · devel/goreleaser/Portfile · ソース: api.github.com

Linux

Nix確認済み · 92%
nix profile install nixpkgs#goreleaser

nixpkgs package indexes · pkgs/by-name/go/goreleaser/package.nix · ソース: api.github.com

Arch Linux pacman確認済み · 92%
sudo pacman -S goreleaser

Arch Linux sync databases · goreleaser · ソース: geo.mirror.pkgbuild.com

openSUSE zypper確認済み · 92%
sudo zypper install goreleaser

openSUSE Tumbleweed package metadata · goreleaser · ソース: download.opensuse.org

Windows

Scoop確認済み · 92%
scoop install main/goreleaser

Scoop official bucket manifest trees · bucket/goreleaser.json · ソース: api.github.com

Windows Package Manager確認済み · 92%
winget install --id goreleaser.goreleaser -e

Windows Package Manager source index · goreleaser.goreleaser · ソース: cdn.winget.microsoft.com

概要

パッケージ概要

Deliver Go binaries as fast and easily as possible

コマンドとエイリアス

  • goreleaser

履歴

プロジェクトの歴史と使われ方

GoReleaser is a release automation tool that turns tagged source code into cross-platform artifacts, release notes, package-manager updates, container images, checksums, signatures, and CI-driven publishing workflows.

プロジェクトの歴史

The GitHub repository was created on December 21, 2016, and the project's own anniversary post identifies that date as the first-commit milestone. GoReleaser spent nearly five years in a v0 release stream before the v1.0.0 announcement, where the maintainer described 467 releases and 3299 commits before stabilizing the v1 line.

The project grew from a Go binary release helper into a broader release-engineering system. Official documentation describes a configuration-driven workflow, CI integration from the first commit, generated changelogs, SCM releases, archives, checksums, package-manager publishing, container images, and supply-chain features. By v2, the project framed the major release mainly as cleanup of deprecated options after the v1.26 series.

採用の歴史

GoReleaser became closely associated with Go CLI distribution because it solved the recurring package-maintainer chore of producing binaries for many operating systems and publishing them to GitHub Releases, Homebrew taps, Scoop, Docker registries, and other downstream channels. Its README advertises local and CI installation paths, and the Homebrew formula records distribution through Homebrew, MacPorts, Nix, pacman, Scoop, winget, and zypper.

The GoReleaser project also developed an ecosystem around documentation, a GitHub Action, sponsorship, Pro features, examples, and related tools such as nfpm. Later announcements expanded the supported build story beyond Go, including Rust, Zig, TypeScript, Python, Bun, and Deno-oriented release workflows.

使われ方

A typical project keeps a .goreleaser.yaml file in the repository, runs goreleaser init or hand-writes the configuration, validates it with goreleaser check, and lets a CI job run GoReleaser on a release tag. The tool then builds artifacts, archives them, generates changelogs, and publishes them according to the configured release, package, and registry sections.

GoReleaser matters in CI because it encodes release policy in source control. Maintainers can review a single YAML file for binary matrix, archive naming, checksums, signing, Homebrew or Scoop publication, Docker images, and release-note behavior instead of keeping bespoke shell scripts in every repository.

パッケージ好きにとっての重要性

Package nerds care about GoReleaser because it is both a tool and a package-production pattern. It popularized a repeatable path from Git tags to bottled binaries, generated formulas, checksums, SBOM/provenance-related outputs, and package-manager pull updates, reducing the hand-maintained release scripts that often bit-rot in CLI projects.

Its configuration precedence list and schema support are also packaging-significant: editors, CI, and downstream automation can reason about a stable release manifest rather than ad hoc release instructions.

タイムライン

  • 2016-12-21: Repository created and first-commit anniversary date
  • 2021-12-03: v1.0.0 announced after 467 releases and 3299 commits
  • 2021-12-21: v1.2 marked five years since the first commit
  • 2024-06-04: GoReleaser v2 announced
  • 2024-12-15: v2.5 announcement highlighted multi-language support and the eighth anniversary
  • 2025-04-29: v2.9 announcement introduced Python builds through Poetry and uv

Related projects

  • goreleaser-action runs GoReleaser from GitHub Actions workflows.
  • nfpm is a related packaging tool used in the GoReleaser ecosystem.
  • Homebrew, Scoop, winget, Docker registries, GitHub Releases, GitLab, and Gitea are common publication targets.
  • Cosign and SLSA-related workflows appear in GoReleaser's supply-chain documentation and blog history.

セキュリティ状態

リスクレベル: グリーン

narrow executable package without higher-risk signals.

リスク分類器

リスク グリーン · 信頼度 低 · appliance

理由

  • narrow executable package without higher-risk signals

信号

  • metadata:no-higher-risk-signals

インストール挙動

  • formula メタデータに Homebrew post-install フックは記録されていません。
  • Homebrew bottle メタデータは 6 個のプラットフォームターゲットで利用できます。
  • ビルドメタデータには 1 件のビルド依存関係があります。

推奨レビュー

エージェントに無人実行させる前に、このツールが平文の認証情報を読むか、リモート状態を書き込むか、成果物を公開するか、プラグインを起動するかを確認してください。

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
.config/goreleaser.yml.config/goreleaser.yaml.goreleaser.yml.goreleaser.yamlgoreleaser.ymlgoreleaser.yaml

実行可能ファイル

インストールされる実行可能ファイル

コマンド種類公開範囲メモ
goreleasercliグローバル実行可能ファイル

鮮度

バージョンと鮮度

これらの信号は、ページ生成時期、パッケージマネージャの活動、上流リリース比較を分けて示します。バージョン遅れは、証拠 URL と比較可能なバージョンがある場合だけ警告されます。

ページ生成日2026-07-25
マネージャ版2.17.0
マネージャ更新日2026-07-05
ローカルデータOK
上流not checked
検出された最新未検出

https://github.com/goreleaser/goreleaser

インストールメタデータ

パッケージメタデータ

パッケージキーbrew:goreleaser
バージョン2.17.0
パッケージマネージャHomebrew
パッケージマネージャページhttps://formulae.brew.sh/formula/goreleaser
ホームページhttps://goreleaser.com/
リポジトリhttps://github.com/goreleaser/goreleaser
上流ドキュメントhttps://goreleaser.com/getting-started
ライセンスMIT
ソースアーカイブhttps://github.com/goreleaser/goreleaser.git
最終更新2026-07-05T03:37:31Z
Pulseupdated
ビルド依存関係go
Bottle利用可能 (対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install未定義
サービス宣言なし

レジストリ情報

ソースデータベース詳細

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namegoreleaser
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

ソースデータベース一致

他のパッケージマネージャ記録

一致は外部パッケージマネージャインデックスから取得され、ローカルの Automic Vault パッケージリンクとは分けて表示されます。

Nix95%

goreleaser

nix profile install nixpkgs#goreleaser
  • normalized package name match
  • 一致条件: Goreleaser
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/go/goreleaser/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
pacman95%

goreleaser 2.14.0-2

Deliver Go binaries as fast and easily as possible

https://github.com/goreleaser/goreleaser

sudo pacman -S goreleaser
  • License: MIT
  • Architecture: x86_64
  • 1 依存関係
  • normalized package name match
  • 一致条件: Goreleaser
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: goreleaser from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
zypper95%

goreleaser 2.16.0-1.1

CLI tool for release engineering in Go, Rust, Zig and TypeScript

https://goreleaser.com/

sudo zypper install goreleaser
  • License: MIT
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: goreleaser
  • 1 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Goreleaser
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: goreleaser from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
MacPorts95%

goreleaser

sudo port install goreleaser
  • normalized package name match
  • 一致条件: Goreleaser
MacPorts ports tree · api.github.com · MacPorts ports tree: devel/goreleaser/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Scoop95%

main/goreleaser

scoop install main/goreleaser
  • normalized package name match
  • 一致条件: Goreleaser
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/goreleaser.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1
winget95%

goreleaser.goreleaser

winget install --id goreleaser.goreleaser -e
  • normalized package name match
  • 一致条件: Goreleaser
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: goreleaser.goreleaser from https://cdn.winget.microsoft.com/cache/source.msix

ソース経路

リポジトリデータから生成

このページは scripts/generate-pkg-sqlite.py が生成した非公開のパッケージ SQLite アーティファクトから av-web によって提供されます。

使用ソース

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment