install

Additional install commands

macOS

Homebrewverified · 100%

brew install goreleaser

local Homebrew formula metadata

MacPortsverified · 94%

sudo port install goreleaser

MacPorts ports tree · devel/goreleaser/Portfile · source: api.github.com

Linux

Nixverified · 92%

nix profile install nixpkgs#goreleaser

nixpkgs package indexes · pkgs/by-name/go/goreleaser/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%

sudo pacman -S goreleaser

Arch Linux sync databases · goreleaser · source: geo.mirror.pkgbuild.com

openSUSE zypperverified · 92%

sudo zypper install goreleaser

openSUSE Tumbleweed package metadata · goreleaser · source: download.opensuse.org

Windows

Scoopverified · 92%

scoop install main/goreleaser

Scoop official bucket manifest trees · bucket/goreleaser.json · source: api.github.com

Windows Package Managerverified · 92%

winget install --id goreleaser.goreleaser -e

Windows Package Manager source index · goreleaser.goreleaser · source: cdn.winget.microsoft.com

overview

Package summary

Deliver Go binaries as fast and easily as possible

Project links

Commands and aliases

goreleaser

history

Project history and usage

GoReleaser is a release automation tool that turns tagged source code into cross-platform artifacts, release notes, package-manager updates, container images, checksums, signatures, and CI-driven publishing workflows.

Project history

The GitHub repository was created on December 21, 2016, and the project's own anniversary post identifies that date as the first-commit milestone. GoReleaser spent nearly five years in a v0 release stream before the v1.0.0 announcement, where the maintainer described 467 releases and 3299 commits before stabilizing the v1 line.

The project grew from a Go binary release helper into a broader release-engineering system. Official documentation describes a configuration-driven workflow, CI integration from the first commit, generated changelogs, SCM releases, archives, checksums, package-manager publishing, container images, and supply-chain features. By v2, the project framed the major release mainly as cleanup of deprecated options after the v1.26 series.

Adoption history

GoReleaser became closely associated with Go CLI distribution because it solved the recurring package-maintainer chore of producing binaries for many operating systems and publishing them to GitHub Releases, Homebrew taps, Scoop, Docker registries, and other downstream channels. Its README advertises local and CI installation paths, and the Homebrew formula records distribution through Homebrew, MacPorts, Nix, pacman, Scoop, winget, and zypper.

The GoReleaser project also developed an ecosystem around documentation, a GitHub Action, sponsorship, Pro features, examples, and related tools such as nfpm. Later announcements expanded the supported build story beyond Go, including Rust, Zig, TypeScript, Python, Bun, and Deno-oriented release workflows.

How it is used

A typical project keeps a .goreleaser.yaml file in the repository, runs goreleaser init or hand-writes the configuration, validates it with goreleaser check, and lets a CI job run GoReleaser on a release tag. The tool then builds artifacts, archives them, generates changelogs, and publishes them according to the configured release, package, and registry sections.

GoReleaser matters in CI because it encodes release policy in source control. Maintainers can review a single YAML file for binary matrix, archive naming, checksums, signing, Homebrew or Scoop publication, Docker images, and release-note behavior instead of keeping bespoke shell scripts in every repository.

Why package nerds care

Package nerds care about GoReleaser because it is both a tool and a package-production pattern. It popularized a repeatable path from Git tags to bottled binaries, generated formulas, checksums, SBOM/provenance-related outputs, and package-manager pull updates, reducing the hand-maintained release scripts that often bit-rot in CLI projects.

Its configuration precedence list and schema support are also packaging-significant: editors, CI, and downstream automation can reason about a stable release manifest rather than ad hoc release instructions.

Timeline

2016-12-21: Repository created and first-commit anniversary date
2021-12-03: v1.0.0 announced after 467 releases and 3299 commits
2021-12-21: v1.2 marked five years since the first commit
2024-06-04: GoReleaser v2 announced
2024-12-15: v2.5 announcement highlighted multi-language support and the eighth anniversary
2025-04-29: v2.9 announcement introduced Python builds through Poetry and uv

Related projects

goreleaser-action runs GoReleaser from GitHub Actions workflows.
nfpm is a related packaging tool used in the GoReleaser ecosystem.
Homebrew, Scoop, winget, Docker registries, GitHub Releases, GitLab, and Gitea are common publication targets.
Cosign and SLSA-related workflows appear in GoReleaser's supply-chain documentation and blog history.

Sources

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

narrow executable package without higher-risk signals

Signals

metadata:no-higher-risk-signals

Install behavior

No Homebrew post-install hook is recorded in formula metadata.
Homebrew bottle metadata is available for 6 platform targets.
Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix: .config/goreleaser.yml.config/goreleaser.yaml.goreleaser.yml.goreleaser.yamlgoreleaser.ymlgoreleaser.yaml

executables

Installed executables

Command	Kind	Exposure	Note
`goreleaser`	cli	global executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08

manager version2.17.0

manager updated2026-07-05

local dataok

upstreamnot checked

latest detectednot detected

https://github.com/goreleaser/goreleaser

infoNo cached GitHub release or tag data was available.https://github.com/goreleaser/goreleasernone confidence

install metadata

Package metadata

Package key	brew:goreleaser
Version	2.17.0
Package manager	Homebrew
Package manager page	https://formulae.brew.sh/formula/goreleaser
Homepage	https://goreleaser.com/
Repository	https://github.com/goreleaser/goreleaser
Upstream docs	https://goreleaser.com/getting-started
License	MIT
Source archive	https://github.com/goreleaser/goreleaser.git
Last updated	2026-07-05T03:37:31Z
Pulse	updated
Build dependencies	go
Bottle	available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install	not defined
Service	none declared

registry facts

Source database details

Source Database	Homebrew formula API
Tap	homebrew/core
Full Name	goreleaser
Version Scheme	0
Revision	0
Head Version	HEAD
Bottle Stable Root URL	https://ghcr.io/v2/homebrew/core
Deprecated	no
Disabled	no
Keg Only	no
URL Keys	head stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

goreleaser

nix profile install nixpkgs#goreleaser

normalized package name match
Matched by: Goreleaser

nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/go/goreleaser/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

pacman95%

goreleaser 2.14.0-2

Deliver Go binaries as fast and easily as possible

https://github.com/goreleaser/goreleaser

sudo pacman -S goreleaser

License: MIT
Architecture: x86_64
1 dependencies
normalized package name match
Matched by: Goreleaser

Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: goreleaser from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

zypper95%

goreleaser 2.16.0-1.1

CLI tool for release engineering in Go, Rust, Zig and TypeScript

https://goreleaser.com/

sudo zypper install goreleaser

License: MIT
Category: Unspecified
Architecture: x86_64
Source Package: goreleaser
1 dependencies
1 provides
normalized package name match
Matched by: Goreleaser

openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: goreleaser from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst

MacPorts95%

goreleaser

sudo port install goreleaser

normalized package name match
Matched by: Goreleaser

MacPorts ports tree · api.github.com · MacPorts ports tree: devel/goreleaser/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

Scoop95%

main/goreleaser

scoop install main/goreleaser

normalized package name match
Matched by: Goreleaser

Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/goreleaser.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

winget95%

goreleaser.goreleaser

winget install --id goreleaser.goreleaser -e

normalized package name match
Matched by: Goreleaser

Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: goreleaser.goreleaser from https://cdn.winget.microsoft.com/cache/source.msix

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Combined YAML source

View the package source record on GitHub.

combined/goreleaser.yml

Used sources

Geiger risk classifier
Nucleus package database
av.db category and tag curation
cross-ecosystem install command graph
curated configuration and credential file locations
curated package history
external package-manager database matches
package relationship graph
package version freshness
package-page enrichment

Install goreleaser with Homebrew, MacPorts, Nix, pacman, scoop, winget, zypper