File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 11ARG BASE_IMAGE
22ARG BUILD_IMAGE
33
4- FROM ${BUILD_IMAGE} as build
4+ FROM ${BUILD_IMAGE} AS build
55USER node
66WORKDIR /home/node
77ADD --chown=node:node package*.json ./
88RUN npm install
99ADD --chown=node:node . .
1010RUN npm run build
1111
12- FROM ${BUILD_IMAGE} as solidity-build
12+ FROM ${BUILD_IMAGE} AS solidity-build
1313RUN apk update && apk add --no-cache python3 alpine-sdk
1414USER node
1515WORKDIR /home/node
@@ -18,16 +18,16 @@ RUN npm install
1818ADD --chown=node:node ./samples/solidity .
1919RUN npx hardhat compile
2020
21- FROM alpine:3.19 AS SBOM
21+ FROM alpine:3.19 AS sbom
2222WORKDIR /
2323ADD . /SBOM
2424RUN apk add --no-cache curl
25- RUN curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin v0.48.3
25+ RUN curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin latest
2626RUN trivy fs --format spdx-json --output /sbom.spdx.json /SBOM
2727RUN trivy sbom /sbom.spdx.json --severity UNKNOWN,HIGH,CRITICAL --exit-code 1
2828
2929FROM $BASE_IMAGE
30- RUN apk add curl=~8.12 jq=~1.7
30+ RUN apk add --no-cache curl jq
3131RUN mkdir -p /app/contracts/source \
3232 && chgrp -R 0 /app/ \
3333 && chmod -R g+rwX /app/ \
You can’t perform that action at this time.
0 commit comments