Updates goreleaser details

.github/workflows/go.yml

@@ -23,14 +23,6 @@ jobs:
     - name: Check out code into the Go module directory
       uses: actions/checkout@v2
 
-    - name: Get dependencies
-      run: |
-        go get -v -t -d ./...
-        if [ -f Gopkg.toml ]; then
-            curl https://raw.githubusercontent.com/golang/dep/master/install.sh | sh
-            dep ensure
-        fi
-
     - name: Import GPG key
       id: import_gpg
       uses: crazy-max/ghaction-import-gpg@v3

.goreleaser.yml

@@ -1,9 +1,13 @@
 # This is an example goreleaser.yaml file with some sane defaults.
 # Make sure to check the documentation at http://goreleaser.com
+
+version: 2
+
 before:
   hooks:
     # download mods to local cache
     - go mod download
+
 builds:
   -
     env:
@@ -30,4 +34,7 @@ changelog:
       - '^test:'
 # SBOM configuration
 sboms:
-  - artifacts: archive
+  - id: spdx
+    artifacts: binary
+    documents:
+    - "${artifact}.spdx.sbom.json"