From 8a99f7e4586f838afb669d3065924208541304b4 Mon Sep 17 00:00:00 2001
From: max furman <mx.furman@gmail.com>
Date: Thu, 9 Sep 2021 16:35:09 -0700
Subject: [PATCH] [action] add header and footer to github release page

---
 .goreleaser.yml | 29 +++++++++++++++++++++++++++++
 1 file changed, 29 insertions(+)

diff --git a/.goreleaser.yml b/.goreleaser.yml
index 8dbbac29..1bef6ce5 100644
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -156,6 +156,35 @@ release:
   # Default is `{{.Tag}}`
   #name_template: "{{.ProjectName}}-v{{.Version}} {{.Env.USER}}"
 
+  # Header template for the release body.
+  # Defaults to empty.
+  header: |
+    Welcome to this new release!
+
+    ## Signatures and Checksums
+
+    `step-ca` uses [sigstore/cosign](https://github.com/sigstore/cosign) for signing and verifying release artifacts.
+    Here is an example of how to use `cosign` to verify a release artifact:
+
+    ```
+    cosign verify-blob \
+      -key https://raw.githubusercontent.com/smallstep/cli/master/cosign.pub \
+      -signature ~/Downloads/step-ca_darwin_0.17.2_amd64.tar.gz.sig
+      ~/Downloads/step-ca_darwin_0.17.2_amd64.tar.gz
+    ```
+
+    We use the `checksums.txt` file to store checksums for every artifact in the release.
+
+  # Footer template for the release body.
+  # Defaults to empty.
+  footer: |
+    ## Thanks!
+
+    Those were the changes on {{ .Tag }}!
+
+    Come join us on [Discord](https://discord.gg/X2RKGwEbV9) to ask questions, chat about PKI,
+    or get a sneak peak at the freshest PKI memes.
+
   # You can disable this pipe in order to not upload any artifacts.
   # Defaults to false.
   #disable: true