agentmods.dev

goreleaser

goreleaser is a skill for Claude Code, Codex from fmind/dot. It costs 46 tokens per session (1,090 once invoked), scanned A, original, MIT.

A release setup for GoReleaser, a tool that builds and publishes Go programs for multiple platforms. It covers tagged releases, checksums, signing, and container images.

In plain words
What is it for?
Use it to build Go binaries, create archives and checksums, publish tag-based releases, sign artifacts with cosign, and build images with ko.
Why use it?
It turns a Go command-line release into a repeatable process with local checks and GitHub Actions automation.

Skill for Claude CodeCodex

not rated 4 today A scan 46 tokens original MIT
View the source file fmind/dot
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/fmind/dot/goreleaser
Any agent
npx skills add fmind/dot --skill goreleaser
Clone the repo
git clone --depth 1 https://github.com/fmind/dot

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for goreleaser

README.md
[![agentmods](https://agentmods.dev/badge/skills/fmind/dot/goreleaser.svg)](https://agentmods.dev/skills/fmind/dot/goreleaser)
Your own site
<a href="https://agentmods.dev/skills/fmind/dot/goreleaser"><img src="https://agentmods.dev/badge/skills/fmind/dot/goreleaser.svg" alt="Measured on agentmods" height="20"></a>
Per session 46 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,090 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00046 $0.01090
Opus 5 $0.00023 $0.00545
Sonnet 5 $0.00009 $0.00218
Haiku 4.5 $0.00005 $0.00109

Measured yesterday against content hash 01f6a496a7b1, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

goreleaser scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/goreleaser/SKILL.md · 60 lines

How it starts

The opening of the file, as written. The whole thing — 60 lines — stays where its author put it; the contents beside it link to each section on GitHub.

GoReleaser

Build, archive, checksum, sign, and publish Go binaries from one .goreleaser.yaml when a v* tag lands. The version, changelog, and tag come from release (git-cliff); images come from ko per containerize; signatures follow cosign.

Workflow

  1. Config: goreleaser init writes a starter; trim it to the minimum and keep GoReleaser out of changelog duty. 
    version: 2
builds:
  - main: ./cmd/<slug>
    env: [CGO_ENABLED=0]
    goos: [linux, darwin]
    goarch: [amd64, arm64]
    ldflags: [-s -w -X main.version={{.Version}}]
archives:
  - formats: [tar.gz]
checksum:
  name_template: checksums.txt
changelog:
  disable: true # git-cliff owns CHANGELOG.md and the release notes
  2. Validate: goreleaser check after every edit; goreleaser healthcheck confirms git, cosign, and ko are on the runner.
  3. Local dry run: build every target without a tag and without publishing. 
    goreleaser release --snapshot --clean
goreleaser build --single-target --snapshot --clean -o dist/<slug> # this machine only
  4. CI: a release.yml workflow on push: tags: ['v*'] with permissions: contents: write (plus id-token: write when signing), actions/checkout with fetch-depth: 0, jdx/mise-action for the toolchain, then the release with git-cliff notes; this workflow owns the GitHub release, so skip the gh release create step of the release skill. 
    git-cliff --latest --strip all > "$RUNNER_TEMP/notes.md"
goreleaser release --clean --release-notes "$RUNNER_TEMP/notes.md" # GITHUB_TOKEN from secrets.GITHUB_TOKEN
  5. Sign and ship images (optional): add signs: with cmd: cosign, args: [sign-blob, --output-certificate=${certificate}, --output-signature=${signature}, --yes, "${artifact}"], artifacts: checksum, and kos: (repositories, platforms) for a multi-arch image; verify with cosign verify-blob per cosign.
  6. Homebrew (optional): homebrew_casks: publishes a cask to a tap repository; it needs a token with write access to that repository, not GITHUB_TOKEN.
  7. Verify: gh release view <tag> lists the archives, checksums.txt, and signatures; finish with the verification steps of release.

Read the full file on GitHub · 60 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 60 lines · 46 tokens per session scan A 01f6a496a7b1

Subscribe to this mod's changes

goreleaser is a skill published in the GitHub repository fmind/dot (4 stars, last pushed today), licensed MIT. It adds 46 tokens to every session and 1,090 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Git and workflowGoLanguagesReleasesai-agentschezmoiclaude-codedotfilesfish-shellgemini-cli
Related

Other skills, from other repositories

go-stack

Build Go projects, libraries, CLIs, TUIs, web apps, or ADK agents with the standard package layout and pinned tooling.

fmind/dotfiles · 31 tokens

python-stack

Build typed Python projects with uv, Ruff, ty, pytest, Litestar, and Typer. Use for packages, CLIs, web apps, tests, typing, or API verification.

fmind/dotfiles · 41 tokens

release

Cut or verify a versioned release — bump semver, generate the changelog with git-cliff, tag and publish on GitHub, or reconcile an already-published tag and assets.

fmind/dotfiles · 40 tokens

python-script

Write standalone single-file Python scripts using PEP 723 inline metadata and uv. Use when creating a quick CLI script that needs dependencies without a full project.

fmind/dotfiles · 34 tokens

dot-release

Prepare, tag, and push a versioned fmind/dotfiles release locally to trigger GitHub Actions CD publication.

fmind/dotfiles · 27 tokens

k8s-local

Create and manage local Kubernetes clusters (k3d or kind) and deploy to them with kubectl, helm, helmfile, and skaffold. Use for local k8s cluster setup, dev loops, and debugging.

fmind/dotfiles · 50 tokens