github.com/goreleaser/goreleaser@v1.25.1/Dockerfile (about)

     1  FROM golang:1.22.1-alpine@sha256:0466223b8544fb7d4ff04748acc4d75a608234bf4e79563bff208d2060c0dd79
     2  
     3  RUN apk add --no-cache bash \
     4  	curl \
     5  	docker-cli \
     6  	docker-cli-buildx \
     7  	git \
     8  	gpg \
     9  	mercurial \
    10  	make \
    11  	openssh-client \
    12  	build-base \
    13  	tini
    14  
    15  # install cosign
    16  COPY --from=gcr.io/projectsigstore/cosign:v2.1.1@sha256:411ace177097a33cb2ee74028a87ffdcb70965003cd1378c1ec7bf9f9dec9359 /ko-app/cosign /usr/bin/cosign
    17  
    18  # install syft
    19  RUN curl -sSfL https://raw.githubusercontent.com/anchore/syft/v0.84.1/install.sh | sh -s -- -b /usr/local/bin
    20  
    21  ENTRYPOINT ["/sbin/tini", "--", "/entrypoint.sh"]
    22  CMD [ "-h" ]
    23  
    24  COPY scripts/entrypoint.sh /entrypoint.sh
    25  RUN chmod +x /entrypoint.sh
    26  
    27  COPY goreleaser_*.apk /tmp/
    28  RUN apk add --no-cache --allow-untrusted /tmp/goreleaser_*.apk