add workflow to check that binaries are reproducible (#66)

.github/workflows/reproduce-binary.yml

@@ -0,0 +1,19 @@
+name: Reproduce binary
+
+on:
+  push:
+    branches:
+      - master
+  pull_request:
+    branches:
+      - "*"
+
+  workflow_dispatch: {}
+
+jobs:
+  reproduce-binary:
+    permissions:
+      contents: read
+    uses: capnspacehook/go-workflows/.github/workflows/reproduce-binary.yml@master
+    with:
+      extra-build-flags: "-ldflags=-s -w -X main.version=devel"

.goreleaser.yml

@@ -16,7 +16,7 @@ builds:
       - -trimpath
     mod_timestamp: '{{ .CommitTimestamp }}'
     ldflags:
-      - -s -w -X "main.version={{ .Tag }}"
+      - '-s -w -X main.version={{ if eq .Tag "v0.0.0" }}devel{{ else }}{{ .Tag }}{{ end }}'
     main: ./cmd/egress-eddie
 
 archives: