cli/cmd/vanity-import/Dockerfile
Snider 6292fa2c77 fix(ci): harden security scan and Dockerfiles
- Upgrade Go to 1.26, FrankenPHP to v1.11.2 (CVE-2026-24894)
- Add non-root USER to all Dockerfiles (Trivy misconfig)
- Upgrade gitleaks to v8.24.3 with arch detection

Co-Authored-By: Virgil <virgil@lethean.io>
2026-02-21 20:51:14 +00:00

11 lines
278 B
Docker

FROM golang:1.25-alpine AS build
WORKDIR /src
COPY go.mod main.go ./
RUN go build -trimpath -ldflags="-w -s" -o /vanity-import .
FROM alpine:3.21
RUN adduser -D -h /home/app app
COPY --from=build /vanity-import /vanity-import
USER app
EXPOSE 8080
ENTRYPOINT ["/vanity-import"]