github.com/anchore/syft@v1.38.2/Dockerfile.nonroot (about)

     1  FROM gcr.io/distroless/static-debian12:nonroot
     2  
     3  # create the /tmp dir, which is needed for image content cache
     4  WORKDIR /tmp
     5  
     6  COPY syft /
     7  
     8  USER nonroot
     9  
    10  ARG BUILD_DATE
    11  ARG BUILD_VERSION
    12  ARG VCS_REF
    13  ARG VCS_URL
    14  
    15  LABEL org.opencontainers.image.created=$BUILD_DATE
    16  LABEL org.opencontainers.image.title="syft"
    17  LABEL org.opencontainers.image.description="CLI tool and library for generating a Software Bill of Materials from container images and filesystems"
    18  LABEL org.opencontainers.image.source=$VCS_URL
    19  LABEL org.opencontainers.image.revision=$VCS_REF
    20  LABEL org.opencontainers.image.vendor="Anchore, Inc."
    21  LABEL org.opencontainers.image.version=$BUILD_VERSION
    22  LABEL org.opencontainers.image.licenses="Apache-2.0"
    23  LABEL io.artifacthub.package.readme-url="https://raw.githubusercontent.com/anchore/syft/main/README.md"
    24  LABEL io.artifacthub.package.logo-url="https://user-images.githubusercontent.com/5199289/136844524-1527b09f-c5cb-4aa9-be54-5aa92a6086c1.png"
    25  LABEL io.artifacthub.package.license="Apache-2.0"
    26  
    27  ENTRYPOINT ["/syft"]