build: optimize binary builds with -trimpath and -buildid= (#422)

- Add -trimpath flag to remove absolute paths for reproducible builds
- Add -buildid= to strip build ID for consistent binary hashes

Author: frjcomp

goreleaser.yaml

@@ -4,6 +4,8 @@ builds:
   - id: "pipeleek"
     main: ./cmd/pipeleek
     binary: pipeleek
+    flags:
+      - -trimpath
     goos:
       - linux
       - windows
@@ -13,6 +15,7 @@ builds:
       - arm64
     ldflags:
       - -s -w
+      - -buildid=
       - -X github.com/CompassSecurity/pipeleek/internal/cmd.Version={{.Version}}
       - -X github.com/CompassSecurity/pipeleek/internal/cmd.Commit={{.Commit}}
       - -X github.com/CompassSecurity/pipeleek/internal/cmd.Date={{.Date}}
@@ -21,6 +24,8 @@ builds:
     skip: "{{ .IsSnapshot }}"
     main: ./cmd/pipeleek-gitlab
     binary: pipeleek-gitlab
+    flags:
+      - -trimpath
     goos:
       - linux
       - windows
@@ -30,13 +35,16 @@ builds:
       - arm64
     ldflags:
       - -s -w
+      - -buildid=
       - -X github.com/CompassSecurity/pipeleek/internal/cmd/common.Version={{.Version}}
       - -X github.com/CompassSecurity/pipeleek/internal/cmd/common.Commit={{.Commit}}
       - -X github.com/CompassSecurity/pipeleek/internal/cmd/common.Date={{.Date}}
   - id: "pipeleek-github"
     skip: "{{ .IsSnapshot }}"
     main: ./cmd/pipeleek-github
     binary: pipeleek-github
+    flags:
+      - -trimpath
     goos:
       - linux
       - windows
@@ -46,13 +54,16 @@ builds:
       - arm64
     ldflags:
       - -s -w
+      - -buildid=
       - -X github.com/CompassSecurity/pipeleek/internal/cmd/common.Version={{.Version}}
       - -X github.com/CompassSecurity/pipeleek/internal/cmd/common.Commit={{.Commit}}
       - -X github.com/CompassSecurity/pipeleek/internal/cmd/common.Date={{.Date}}
   - id: "pipeleek-bitbucket"
     skip: "{{ .IsSnapshot }}"
     main: ./cmd/pipeleek-bitbucket
     binary: pipeleek-bitbucket
+    flags:
+      - -trimpath
     goos:
       - linux
       - windows
@@ -62,13 +73,16 @@ builds:
       - arm64
     ldflags:
       - -s -w
+      - -buildid=
       - -X github.com/CompassSecurity/pipeleek/internal/cmd/common.Version={{.Version}}
       - -X github.com/CompassSecurity/pipeleek/internal/cmd/common.Commit={{.Commit}}
       - -X github.com/CompassSecurity/pipeleek/internal/cmd/common.Date={{.Date}}
   - id: "pipeleek-devops"
     skip: "{{ .IsSnapshot }}"
     main: ./cmd/pipeleek-devops
     binary: pipeleek-devops
+    flags:
+      - -trimpath
     goos:
       - linux
       - windows
@@ -78,13 +92,16 @@ builds:
       - arm64
     ldflags:
       - -s -w
+      - -buildid=
       - -X github.com/CompassSecurity/pipeleek/internal/cmd/common.Version={{.Version}}
       - -X github.com/CompassSecurity/pipeleek/internal/cmd/common.Commit={{.Commit}}
       - -X github.com/CompassSecurity/pipeleek/internal/cmd/common.Date={{.Date}}
   - id: "pipeleek-gitea"
     skip: "{{ .IsSnapshot }}"
     main: ./cmd/pipeleek-gitea
     binary: pipeleek-gitea
+    flags:
+      - -trimpath
     goos:
       - linux
       - windows
@@ -94,6 +111,7 @@ builds:
       - arm64
     ldflags:
       - -s -w
+      - -buildid=
       - -X github.com/CompassSecurity/pipeleek/internal/cmd/common.Version={{.Version}}
       - -X github.com/CompassSecurity/pipeleek/internal/cmd/common.Commit={{.Commit}}
       - -X github.com/CompassSecurity/pipeleek/internal/cmd/common.Date={{.Date}}