Revert "Merge remote-tracking branch 'origin/lance/osv-scanner' into staging"

This reverts commit 32d6c67e81, reversing
changes made to 03ffc3a9ea.
This commit is contained in:
ryan 2024-09-06 15:31:35 -04:00
parent d085516078
commit 75f36375b9
No known key found for this signature in database
GPG key ID: 8E401478A3FBEF72

View file

@ -1,43 +0,0 @@
FROM scratch AS base
ENV VERSION=1.6.1
ENV SRC_FILE=osv-scanner-${VERSION}.tar.gz
ENV SRC_SITE=https://github.com/google/osv-scanner/archive/v${VERSION}/${SRC_FILE}
ENV SRC_HASH=ecaefa45c63057a8ebae9fcf9a0b760435c640157516cebfd44237664923ee13
FROM base AS fetch
ADD --checksum=sha256:${SRC_HASH} ${SRC_SITE} .
FROM fetch AS build
COPY --from=stagex/musl . /
COPY --from=stagex/bash . /
COPY --from=stagex/busybox . /
COPY --from=stagex/go . /
COPY --from=stagex/make . /
COPY --from=stagex/gcc . /
COPY --from=stagex/binutils . /
COPY --from=stagex/pkgconf . /
RUN tar -xf ${SRC_FILE}
ENV GOPROXY=https://proxy.golang.org,direct
ENV GOSUMDB=sum.golang.org
ENV GOPATH=/cache/go
ENV GOBIN=${GOPATH}/bin
ENV PATH=${GOBIN}:${PATH}
WORKDIR /buildkit-${VERSION}
RUN <<-EOF
set -eux
mkdir -p out
go build -v \
--ldflags="-w -s -buildid= " \
-o out/ \
./cmd/...
EOF
FROM build AS install
RUN <<-EOF
set -eux
mkdir -p /rootfs
install -Dm755 ./out/osv-scanner -t /rootfs/usr/bin/
EOF
FROM stagex/filesystem AS package
COPY --from=install /rootfs/. /