mirror of
https://github.com/securego/gosec.git
synced 2024-12-25 12:05:52 +00:00
5f98926a7b
* ignore the temporary image file used for builds Signed-off-by: Andrew Hsu <andrewhsu@docker.com> * no need for GOPATH in the Dockerfile It is already set in the golang:1.10.3-alpine3.8 image. Signed-off-by: Andrew Hsu <andrewhsu@docker.com> * no need for GOROOT in Dockerfile The correct value is embedded in the go tool. Signed-off-by: Andrew Hsu <andrewhsu@docker.com> * bump Dockerfile golang to 1.10.4 The latest golang version thus far. Signed-off-by: Andrew Hsu <andrewhsu@docker.com> * replace docker-entrypoint.sh with the gosec binary Signed-off-by: Andrew Hsu <andrewhsu@docker.com> * git ignore gosec binary Signed-off-by: Andrew Hsu <andrewhsu@docker.com> * refactor Dockerfile into multi-stage First stage does the build in a pristine alpine environment. Second stage is a minimal image with just the necessary stuff to run the compiled binary. Also added packages for gcc and musl-dev so cgo can do its thang. Signed-off-by: Andrew Hsu <andrewhsu@docker.com> * fix the image execution example in README.md Signed-off-by: Andrew Hsu <andrewhsu@docker.com>
11 lines
324 B
Docker
11 lines
324 B
Docker
FROM golang:1.10.4-alpine3.8 as build
|
|
WORKDIR /go/src/github.com/securego/gosec
|
|
COPY . .
|
|
RUN apk add -U git make
|
|
RUN go get -u github.com/golang/dep/cmd/dep
|
|
RUN make
|
|
|
|
FROM golang:1.10.4-alpine3.8
|
|
RUN apk add -U gcc musl-dev
|
|
COPY --from=build /go/src/github.com/securego/gosec/gosec /usr/local/bin/gosec
|
|
ENTRYPOINT ["gosec"]
|