FROM golang:1.22-alpine3.20 AS builder

WORKDIR /app
COPY . .

RUN go mod download && go mod verify
RUN CGO_ENABLED=0 go build -ldflags="-s -w" -trimpath -o build/goscan

FROM alpine:3.20

COPY --from=builder /usr/local/go /usr/local/go
COPY --from=builder /app/build/goscan /goscan
COPY ./entrypoint.sh /entrypoint.sh
RUN chmod +x /goscan && chmod +x /entrypoint.sh

RUN curl -sfL https://raw.githubusercontent.com/securego/gosec/master/install.sh | sh -s -- -b /usr/local/bin

ENV PATH="/usr/local/go/bin:${PATH}"

ENTRYPOINT ["/entrypoint.sh"]