build.sh

#!/usr/bin/env bash
# Release build for envaudit.
#
# Usage:
#   ./build.sh                      # build ./envaudit, version from nearest git tag
#   VERSION=1.2.3 ./build.sh        # override the version explicitly
#
# The version injected via -ldflags defaults to the nearest `v*` tag
# (`git describe`), falling back to the compile-time default in
# cmd/envaudit/main.go when git isn't available or there are no tags.
set -euo pipefail

DEFAULT_VERSION="1.1.0"
VERSION="${VERSION:-$(git describe --tags --always --dirty 2>/dev/null || echo "$DEFAULT_VERSION")}"
VERSION="${VERSION#v}"

echo "Building envaudit v${VERSION} ..."
CGO_ENABLED=0 go build -trimpath \
	-ldflags "-s -w -X 'main.version=${VERSION}'" \
	-o envaudit ./cmd/envaudit

echo "Done: ./envaudit (v${VERSION})"
./envaudit version