- Upgrade Go to 1.26, FrankenPHP to v1.11.2 (CVE-2026-24894) - Add non-root USER to all Dockerfiles (Trivy misconfig) - Upgrade gitleaks to v8.24.3 with arch detection Co-Authored-By: Virgil <virgil@lethean.io>
11 lines
278 B
Docker
11 lines
278 B
Docker
FROM golang:1.25-alpine AS build
|
|
WORKDIR /src
|
|
COPY go.mod main.go ./
|
|
RUN go build -trimpath -ldflags="-w -s" -o /vanity-import .
|
|
|
|
FROM alpine:3.21
|
|
RUN adduser -D -h /home/app app
|
|
COPY --from=build /vanity-import /vanity-import
|
|
USER app
|
|
EXPOSE 8080
|
|
ENTRYPOINT ["/vanity-import"]
|