FROM golang:1.19.5-alpine@sha256:2381c1e5f8350a901597d633b2e517775eeac7a6682be39225a93b22cfd0f8bb RUN apk add --no-cache bash \ curl \ docker-cli \ docker-cli-buildx \ git \ gpg \ mercurial \ make \ openssh-client \ build-base \ tini # install cosign COPY --from=gcr.io/projectsigstore/cosign:v1.12.1@sha256:ac8e08a2141e093f4fd7d1d0b05448804eb3771b66574b13ad73e31b460af64d /ko-app/cosign /usr/bin/cosign ENTRYPOINT ["/sbin/tini", "--", "/entrypoint.sh"] CMD [ "-h" ] COPY scripts/entrypoint.sh /entrypoint.sh RUN chmod +x /entrypoint.sh COPY goreleaser_*.apk /tmp/ RUN apk add --no-cache --allow-untrusted /tmp/goreleaser_*.apk