mirror of
https://github.com/anchore/syft
synced 2024-11-10 06:14:16 +00:00
f7a44b3d2c
Signed-off-by: Weston Steimel <weston.steimel@anchore.com>
29 lines
883 B
Docker
29 lines
883 B
Docker
FROM alpine:latest AS build
|
|
|
|
RUN apk --no-cache add ca-certificates
|
|
|
|
FROM scratch
|
|
# needed for version check HTTPS request
|
|
COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
|
|
|
|
# create the /tmp dir, which is needed for image content cache
|
|
WORKDIR /tmp
|
|
|
|
COPY syft /
|
|
|
|
ARG BUILD_DATE
|
|
ARG BUILD_VERSION
|
|
ARG VCS_REF
|
|
ARG VCS_URL
|
|
|
|
LABEL org.opencontainers.image.created=$BUILD_DATE
|
|
LABEL org.opencontainers.image.title="syft"
|
|
LABEL org.opencontainers.image.description="CLI tool and library for generating a Software Bill of Materials from container images and filesystems"
|
|
LABEL org.opencontainers.image.source=$VCS_URL
|
|
LABEL org.opencontainers.image.revision=$VCS_REF
|
|
LABEL org.opencontainers.image.vendor="Anchore, Inc."
|
|
LABEL org.opencontainers.image.version=$BUILD_VERSION
|
|
LABEL org.opencontainers.image.licenses="Apache-2.0"
|
|
|
|
|
|
ENTRYPOINT ["/syft"]
|