mirror of
https://github.com/mikefarah/yq.git
synced 2024-11-12 13:48:06 +00:00
5df0e49b1e
Adding group:user to fix (CIS_Docker_v1.2.0 - 4.1) Image should be created with a non-root user
33 lines
745 B
Docker
33 lines
745 B
Docker
FROM golang:1.15 as builder
|
|
|
|
WORKDIR /go/src/mikefarah/yq
|
|
|
|
# cache devtools
|
|
COPY ./scripts/devtools.sh /go/src/mikefarah/yq/scripts/devtools.sh
|
|
RUN ./scripts/devtools.sh
|
|
|
|
COPY . /go/src/mikefarah/yq
|
|
|
|
RUN CGO_ENABLED=0 make local build
|
|
|
|
# Choose alpine as a base image to make this useful for CI, as many
|
|
# CI tools expect an interactive shell inside the container
|
|
FROM alpine:3.13.5 as production
|
|
|
|
RUN mkdir /home/yq/
|
|
RUN addgroup -g 1000 yq && \
|
|
adduser -u 1000 -G yq -s /bin/bash -h /home/yq -D yq
|
|
RUN chown -R yq:yq /home/yq/
|
|
|
|
COPY --from=builder /go/src/mikefarah/yq/yq /usr/bin/yq
|
|
RUN chmod +x /usr/bin/yq
|
|
|
|
ARG VERSION=none
|
|
LABEL version=${VERSION}
|
|
|
|
USER yq
|
|
|
|
WORKDIR /workdir
|
|
|
|
ENTRYPOINT ["/usr/bin/yq"]
|