mirror of
https://github.com/ivuorinen/gibidify.git
synced 2026-01-26 03:24:05 +00:00
Ismo Vuorinen
3f65b813bd
* chore(ci): update go to 1.25, add permissions and envs * fix(ci): update pr-lint.yml * chore: update go, fix linting * fix: tests and linting * fix(lint): lint fixes, renovate should now pass * fix: updates, security upgrades * chore: workflow updates, lint * fix: more lint, checkmake, and other fixes * fix: more lint, convert scripts to POSIX compliant * fix: simplify codeql workflow * tests: increase test coverage, fix found issues * fix(lint): editorconfig checking, add to linters * fix(lint): shellcheck, add to linters * fix(lint): apply cr comment suggestions * fix(ci): remove step-security/harden-runner * fix(lint): remove duplication, apply cr fixes * fix(ci): tests in CI/CD pipeline * chore(lint): deduplication of strings * fix(lint): apply cr comment suggestions * fix(ci): actionlint * fix(lint): apply cr comment suggestions * chore: lint, add deps management
39 lines
943 B
Docker
39 lines
943 B
Docker
# Build stage - builds the binary for the target architecture
|
|
FROM --platform=$BUILDPLATFORM golang:1.25.1-alpine AS builder
|
|
|
|
# Build arguments automatically set by buildx
|
|
ARG TARGETOS
|
|
ARG TARGETARCH
|
|
ARG TARGETVARIANT
|
|
|
|
WORKDIR /build
|
|
|
|
# Copy go mod files first for better layer caching
|
|
COPY go.mod go.sum ./
|
|
RUN go mod download
|
|
|
|
# Copy source code
|
|
COPY . .
|
|
|
|
# Build the binary for the target platform
|
|
RUN CGO_ENABLED=0 GOOS=${TARGETOS} GOARCH=${TARGETARCH} \
|
|
go build -ldflags="-s -w" -o gibidify .
|
|
|
|
# Runtime stage - minimal image with the binary
|
|
FROM alpine:3.22.1
|
|
|
|
# Install ca-certificates for HTTPS and create non-root user
|
|
# hadolint ignore=DL3018
|
|
# kics-scan ignore-line
|
|
RUN apk add --no-cache ca-certificates && \
|
|
adduser -D -s /bin/sh gibidify
|
|
|
|
# Copy the binary from builder
|
|
COPY --from=builder /build/gibidify /usr/local/bin/gibidify
|
|
|
|
# Use non-root user
|
|
USER gibidify
|
|
|
|
# Set the entrypoint
|
|
ENTRYPOINT ["/usr/local/bin/gibidify"]
|