github.com/noqcks/syft@v0.0.0-20230920222752-a9e2c4e288e5/Dockerfile (about) 1 FROM gcr.io/distroless/static-debian11:debug@sha256:a0a404776dec98be120089ae42bbdfbe48c177921d856937d124d48eb8c0b951 AS build 2 3 FROM scratch 4 # needed for version check HTTPS request 5 COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt 6 7 # create the /tmp dir, which is needed for image content cache 8 WORKDIR /tmp 9 10 COPY syft / 11 12 ARG BUILD_DATE 13 ARG BUILD_VERSION 14 ARG VCS_REF 15 ARG VCS_URL 16 17 LABEL org.opencontainers.image.created=$BUILD_DATE 18 LABEL org.opencontainers.image.title="syft" 19 LABEL org.opencontainers.image.description="CLI tool and library for generating a Software Bill of Materials from container images and filesystems" 20 LABEL org.opencontainers.image.source=$VCS_URL 21 LABEL org.opencontainers.image.revision=$VCS_REF 22 LABEL org.opencontainers.image.vendor="Anchore, Inc." 23 LABEL org.opencontainers.image.version=$BUILD_VERSION 24 LABEL org.opencontainers.image.licenses="Apache-2.0" 25 LABEL io.artifacthub.package.readme-url="https://raw.githubusercontent.com/anchore/syft/main/README.md" 26 LABEL io.artifacthub.package.logo-url="https://user-images.githubusercontent.com/5199289/136844524-1527b09f-c5cb-4aa9-be54-5aa92a6086c1.png" 27 LABEL io.artifacthub.package.license="Apache-2.0" 28 29 ENTRYPOINT ["/syft"]