36 lines
710 B
Docker
36 lines
710 B
Docker
# docksec Dockerfile
|
|
# CarterPerez-dev | 2026
|
|
# Multi-stage build for minimal production image
|
|
|
|
FROM golang:1.23-alpine AS builder
|
|
|
|
RUN apk add --no-cache git ca-certificates
|
|
|
|
WORKDIR /build
|
|
|
|
COPY go.mod go.sum ./
|
|
RUN go mod download
|
|
|
|
COPY . .
|
|
|
|
ARG VERSION=dev
|
|
ARG COMMIT=none
|
|
ARG BUILD_DATE=unknown
|
|
|
|
RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build \
|
|
-trimpath \
|
|
-ldflags "-s -w \
|
|
-X main.version=${VERSION} \
|
|
-X main.commit=${COMMIT} \
|
|
-X main.buildDate=${BUILD_DATE}" \
|
|
-o docksec \
|
|
./cmd/docksec
|
|
|
|
FROM scratch
|
|
|
|
COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
|
|
COPY --from=builder /build/docksec /docksec
|
|
|
|
ENTRYPOINT ["/docksec"]
|
|
CMD ["scan"]
|