From 035829c68294c5cd899761d1415fb103716990a3 Mon Sep 17 00:00:00 2001
From: Fu Diwei <fudiwei@sina.com>
Date: Wed, 5 Nov 2025 18:59:31 +0800
Subject: [PATCH] build: go build -trimpath

---
 .github/workflows/release.yml | 6 +++---
 .goreleaser.yml               | 6 ++++--
 Dockerfile                    | 2 +-
 Dockerfile.gh                 | 2 +-
 Makefile                      | 2 +-
 5 files changed, 10 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d3ef2cc90..ee445e317 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -66,7 +66,7 @@ jobs:
               go env -w GOARCH=$ARCH
               go env -u GOARM
             fi
-            go build -ldflags="-s -w -X github.com/certimate-go/certimate.Version=${GITHUB_REF#refs/tags/}" -o dist/linux/certimate_${GITHUB_REF#refs/tags/}_linux_$ARCH
+            go build -trimpath -ldflags="-s -w -X github.com/certimate-go/certimate.Version=${GITHUB_REF#refs/tags/}" -o dist/linux/certimate_${GITHUB_REF#refs/tags/}_linux_$ARCH
           done
 
       - name: Upload Linux binaries
@@ -104,7 +104,7 @@ jobs:
           mkdir -p dist/darwin
           for ARCH in amd64 arm64; do
             go env -w GOARCH=$ARCH
-            go build -ldflags="-s -w -X github.com/certimate-go/certimate.Version=${GITHUB_REF#refs/tags/}" -o dist/darwin/certimate_${GITHUB_REF#refs/tags/}_darwin_$ARCH
+            go build -trimpath -ldflags="-s -w -X github.com/certimate-go/certimate.Version=${GITHUB_REF#refs/tags/}" -o dist/darwin/certimate_${GITHUB_REF#refs/tags/}_darwin_$ARCH
           done
 
       - name: Upload macOS binaries
@@ -142,7 +142,7 @@ jobs:
           mkdir -p dist/windows
           for ARCH in amd64 arm64 386; do
             go env -w GOARCH=$ARCH
-            go build -ldflags="-s -w -X github.com/certimate-go/certimate.Version=${GITHUB_REF#refs/tags/}" -o dist/windows/certimate_${GITHUB_REF#refs/tags/}_windows_$ARCH.exe
+            go build -trimpath -ldflags="-s -w -X github.com/certimate-go/certimate.Version=${GITHUB_REF#refs/tags/}" -o dist/windows/certimate_${GITHUB_REF#refs/tags/}_windows_$ARCH.exe
           done
 
       - name: Upload Windows binaries
diff --git a/.goreleaser.yml b/.goreleaser.yml
index b131d4a3f..947d07b76 100644
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -10,10 +10,12 @@ builds:
   - id: build_noncgo
     main: ./
     binary: certimate
-    ldflags:
-      - -s -w -X github.com/certimate-go/certimate.Version={{ .Version }}
     env:
       - CGO_ENABLED=0
+    flags:
+      - -trimpath
+    ldflags:
+      - -s -w -X github.com/certimate-go/certimate.Version={{ .Version }}
     goos:
       - linux
       - windows
diff --git a/Dockerfile b/Dockerfile
index 6485e54ed..25fcf3640 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -14,7 +14,7 @@ COPY ../. /app/
 RUN rm -rf /app/ui/dist
 COPY --from=webui-builder /app/ui/dist /app/ui/dist
 ENV CGO_ENABLED=0
-RUN go build -ldflags="-s -w" -o certimate
+RUN go build -trimpath -ldflags="-s -w" -o certimate
 
 
 
diff --git a/Dockerfile.gh b/Dockerfile.gh
index 0f1b7bc31..686c391f7 100644
--- a/Dockerfile.gh
+++ b/Dockerfile.gh
@@ -6,7 +6,7 @@ FROM golang:1.24-alpine AS server-builder
 WORKDIR /app
 COPY ../. /app/
 ENV CGO_ENABLED=0
-RUN go build -ldflags="-s -w" -o certimate
+RUN go build -trimpath -ldflags="-s -w" -o certimate
 
 
 
diff --git a/Makefile b/Makefile
index eb05c306b..29ac035c0 100644
--- a/Makefile
+++ b/Makefile
@@ -22,7 +22,7 @@ $(OS_ARCH):
 	GOOS=$(word 1,$(subst /, ,$@)) \
 	GOARCH=$(word 2,$(subst /, ,$@)) \
 	CGO_ENABLED=0 \
-	go build -o $(BUILD_DIR)/$(BINARY_NAME)_$(word 1,$(subst /, ,$@))_$(word 2,$(subst /, ,$@)) -ldflags="-X main.version=$(VERSION) -s -w" .
+	go build -trimpath -ldflags="-X main.version=$(VERSION) -s -w" -o $(BUILD_DIR)/$(BINARY_NAME)_$(word 1,$(subst /, ,$@))_$(word 2,$(subst /, ,$@)) .
 
 # 清理构建文件
 clean: