How does archive.files work?

[stdedos]

In the documentation here https://goreleaser.com/customization/archive/?h=archives it says that

    # Additional files/globs you want to add to the archive.
    #
    # Default: [ 'LICENSE*', 'README*', 'CHANGELOG', 'license*', 'readme*', 'changelog'].
    # Templates: allowed.
    files:

I am trying to add additionally dist/source.sbom.spdx.json. So I thought the correct way to go was this:

    files:
      - 'LICENSE*'
      - 'README*'
      - 'CHANGELOG'
      - 'license*'
      - 'readme*'
      - 'changelog'
      # Defaults ^^^
      - src: "dist/source.sbom.spdx.json"
        strip_parent: true

However, that leads to "not found" errors https://github.com/stdedos/junit2html/actions/runs/10072198510/job/27843687785#step:7:51

• Is documentation out date? Or are the default archive.files processed differently from the defined archive.files?

• Maybe support archive.add_files, and/or archive.remove_files?

  Tools like e.g. https://flake8.pycqa.org/en/latest/user/configuration.html have supported extend-ignore to "avoid mutating the defaults", but the users can add their extra configuration on top of the tool's suggestions.

  ofc that increases maintenance burden, I get that. I haven't found out a new way of "keep accepting defaults in array values, and piece-wise mutate them on local config". I'd be glad to hear your opinion, even if x_files is out of the question.

... I think that's impossible? It seems that sbom: comes after archives: - and I haven't seen a way to adjust the "build order"

[caarlos0]

the defaults are handled differently as they might not exist.
if you add more files, you need to specify only the files you want.

that said, right now its not possible to archive a sbom. they run after the archive, because it can make sboms of archives too.