omit vcs info from build (#1514)

spencerschrock · web-flow · commit 69ae593b7add · 2025-02-20T15:47:58.000-05:00
The detected info is interfering with the manually specified Scorecard version in the LDFLAGS. While `buildvcs` has been present since Go 1.18, Go 1.24 changed the behavior again. Our docker image uses Go 1.24 as of 3676bbc. https://go.dev/doc/go1.24#go-command Signed-off-by: Spencer Schrock <sschrock@google.com>
diff --git a/Makefile b/Makefile
@@ -3,4 +3,4 @@ LDFLAGS=-X sigs.k8s.io/release-utils/version.gitVersion=v5.1.1 -X sigs.k8s.io/re
 
 build: ## Runs go build on repo
 	# Run go build and generate scorecard executable
-	CGO_ENABLED=0 go build -o scorecard-action -trimpath -a -tags netgo -ldflags '$(LDFLAGS)'
+	CGO_ENABLED=0 go build -o scorecard-action -trimpath -a -tags netgo -buildvcs=false -ldflags '$(LDFLAGS)'
