From 1fef1345609d499226e9b9e43cff056d7755b8a1 Mon Sep 17 00:00:00 2001
From: Cole Kennedy <cole@testifysec.com>
Date: Sat, 27 May 2023 11:41:20 -0500
Subject: [PATCH] add upx

---
 .github/workflows/release.yml | 13 ++++++++++++-
 .goreleaser.yaml              | 14 ++++++++++++++
 2 files changed, 26 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c3c335e9..29ae461e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -1,6 +1,7 @@
 permissions:
   id-token: write # This is required for requesting the JWT
   contents: read  # This is required for actions/checkout
+
 name: release
 on: [push, pull_request]
 jobs:
@@ -81,6 +82,16 @@ jobs:
       - name: Download GoReleaser
         run: go install github.com/goreleaser/goreleaser@latest
 
+
+
+      - name: Install UPX
+        uses: crazy-max/ghaction-upx@v2
+        with:
+          install-only: true
+      - name: UPX version
+        run: upx --version
+
+
       - name: Run GoReleaser
         uses: testifysec/witness-run-action@v0.1.2
         env:
@@ -114,7 +125,7 @@ jobs:
           enable-archivista: true
           attestations: "github git"
           trace: false
-          step: build
+          step: package
           command: >
             docker buildx build
             --build-arg BINARY_PATH=./dist/witness_linux_amd64_v1/witness
diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index c4699aba..f7debbba 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -39,3 +39,17 @@ release:
   prerelease: auto
   github:
     owner: "{{ .Env.GITHUB_REPOSITORY_OWNER }}"
+upx:
+  -
+    # Whether to enable it or not.
+    enabled: true
+    
+    # Compress argument.
+    # Valid options are from '1' (faster) to '9' (better), and 'best'.
+    compress: best
+
+    # Whether to try LZMA (slower).
+    lzma: true
+
+    # Whether to try all methods and filters (slow).
+    brute: true
\ No newline at end of file