Add global --version flag with GoReleaser integration (#358)

* Add global --version flag with GoReleaser integration

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: frjcomp <107982661+frjcomp@users.noreply.github.com>

Author: Copilot

goreleaser.yaml

@@ -10,4 +10,9 @@ builds:
       - windows
     goarch:
       - amd64
-      - arm64
+      - arm64
+    ldflags:
+      - -s -w
+      - -X github.com/CompassSecurity/pipeleak/cmd.Version={{.Version}}
+      - -X github.com/CompassSecurity/pipeleak/cmd.Commit={{.Commit}}
+      - -X github.com/CompassSecurity/pipeleak/cmd.Date={{.Date}}

src/pipeleak/cmd/root.go

@@ -23,12 +23,20 @@ import (
 // TerminalRestorer is a function that can be called to restore terminal state
 var TerminalRestorer func()
 
+// Version information - set via ldflags during build
+var (
+	Version = "dev"
+	Commit  = "none"
+	Date    = "unknown"
+)
+
 var (
 	rootCmd = &cobra.Command{
 		Use:     "pipeleak",
 		Short:   "Scan job logs and artifacts for secrets",
 		Long:    "Pipeleak is a tool designed to scan CI/CD job output logs and artifacts for potential secrets.",
 		Example: "pipeleak gl scan --token glpat-xxxxxxxxxxx --gitlab https://gitlab.com",
+		Version: getVersion(),
 		PersistentPreRun: func(cmd *cobra.Command, args []string) {
 			initLogger(cmd)
 			setGlobalLogLevel(cmd)
@@ -46,6 +54,11 @@ func Execute() error {
 	return rootCmd.Execute()
 }
 
+// getVersion returns the version string in the format: version (commit) built on date
+func getVersion() string {
+	return Version
+}
+
 func init() {
 	rootCmd.AddCommand(github.NewGitHubRootCmd())
 	rootCmd.AddCommand(gitlab.NewGitLabRootCmd())
@@ -60,6 +73,10 @@ func init() {
 	rootCmd.PersistentFlags().StringVar(&LogLevel, "log-level", "", "Set log level globally (debug, info, warn, error). Example: --log-level=warn")
 	rootCmd.PersistentFlags().BoolVar(&LogColor, "color", true, "Enable colored log output (auto-disabled when using --logfile)")
 
+	// Set custom version template to show detailed version info
+	rootCmd.SetVersionTemplate(`{{.Version}}
+`)
+
 	rootCmd.AddGroup(&cobra.Group{ID: "GitHub", Title: "GitHub Commands"})
 	rootCmd.AddGroup(&cobra.Group{ID: "GitLab", Title: "GitLab Commands"})
 	rootCmd.AddGroup(&cobra.Group{ID: "Helper", Title: "Various Helper Commands"})

src/pipeleak/cmd/root_test.go

@@ -227,3 +227,49 @@ func TestCustomWriter_WritesCorrectly(t *testing.T) {
 		assert.Contains(t, string(content), "test", "Log content should be written")
 	})
 }
+
+func TestVersionFlagRegistered(t *testing.T) {
+	// Version flag is automatically added by Cobra when Version is set on the command
+	// Check that the rootCmd has a version set
+	assert.NotEmpty(t, rootCmd.Version, "rootCmd should have a version set")
+}
+
+func TestGetVersion(t *testing.T) {
+	// Save original values
+	originalVersion := Version
+	originalCommit := Commit
+	originalDate := Date
+	defer func() {
+		Version = originalVersion
+		Commit = originalCommit
+		Date = originalDate
+	}()
+
+	t.Run("returns default dev version", func(t *testing.T) {
+		Version = "dev"
+		Commit = "none"
+		Date = "unknown"
+		result := getVersion()
+		assert.Equal(t, "dev", result)
+	})
+
+	t.Run("returns git tag version", func(t *testing.T) {
+		Version = "v1.2.3"
+		Commit = "abc123"
+		Date = "2025-11-17"
+		result := getVersion()
+		assert.Equal(t, "v1.2.3", result)
+	})
+
+	t.Run("returns commit hash when not on tag", func(t *testing.T) {
+		Version = "70926c9"
+		Commit = "70926c9"
+		Date = "2025-11-17"
+		result := getVersion()
+		assert.Equal(t, "70926c9", result)
+	})
+}
+
+func TestRootCmdHasVersion(t *testing.T) {
+	assert.NotEmpty(t, rootCmd.Version, "rootCmd should have a version")
+}