mirror of
https://github.com/anchore/grype.git
synced 2026-10-28 08:24:36 +08:00
Alex Goodman
94ce32f170
* chore: let go-make own the go version The bootstrap action always passed its go-version input (default empty) to go-make setup, which made setup read go.mod instead of using its own default, so release builds stayed on go 1.26.8. Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * chore: move images to distroless static-debian13 static-debian12 still ships ca-certificates 20250419~deb12u1 with the emSign ECC Root CA - G3 root; static-debian13 ships 20250419+deb13u1 without it. Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
30 lines
1.1 KiB
Docker
30 lines
1.1 KiB
Docker
FROM gcr.io/distroless/static-debian13:latest AS build
|
|
|
|
FROM scratch
|
|
# needed for version check HTTPS request
|
|
COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
|
|
|
|
# create the /tmp dir, which is needed for image content cache
|
|
WORKDIR /tmp
|
|
|
|
COPY grype /
|
|
|
|
ARG BUILD_DATE
|
|
ARG BUILD_VERSION
|
|
ARG VCS_REF
|
|
ARG VCS_URL
|
|
|
|
LABEL org.opencontainers.image.created=$BUILD_DATE
|
|
LABEL org.opencontainers.image.title="grype"
|
|
LABEL org.opencontainers.image.description="A vulnerability scanner for container images and filesystems"
|
|
LABEL org.opencontainers.image.source=$VCS_URL
|
|
LABEL org.opencontainers.image.revision=$VCS_REF
|
|
LABEL org.opencontainers.image.vendor="Anchore, Inc."
|
|
LABEL org.opencontainers.image.version=$BUILD_VERSION
|
|
LABEL org.opencontainers.image.licenses="Apache-2.0"
|
|
LABEL io.artifacthub.package.readme-url="https://raw.githubusercontent.com/anchore/grype/main/README.md"
|
|
LABEL io.artifacthub.package.logo-url="https://user-images.githubusercontent.com/5199289/136855393-d0a9eef9-ccf1-4e2b-9d7c-7aad16a567e5.png"
|
|
LABEL io.artifacthub.package.license="Apache-2.0"
|
|
|
|
ENTRYPOINT ["/grype"]
|