You've already forked goreleaser
							
							
				mirror of
				https://github.com/goreleaser/goreleaser.git
				synced 2025-10-30 23:58:09 +02:00 
			
		
		
		
	Bumps golang from 1.20.2-alpine to 1.20.3-alpine. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
		
			
				
	
	
		
			26 lines
		
	
	
		
			643 B
		
	
	
	
		
			Docker
		
	
	
	
	
	
			
		
		
	
	
			26 lines
		
	
	
		
			643 B
		
	
	
	
		
			Docker
		
	
	
	
	
	
| FROM golang:1.20.3-alpine@sha256:08e9c086194875334d606765bd60aa064abd3c215abfbcf5737619110d48d114
 | |
| 
 | |
| RUN apk add --no-cache bash \
 | |
| 	curl \
 | |
| 	docker-cli \
 | |
| 	docker-cli-buildx \
 | |
| 	git \
 | |
| 	gpg \
 | |
| 	mercurial \
 | |
| 	make \
 | |
| 	openssh-client \
 | |
| 	build-base \
 | |
| 	tini
 | |
| 
 | |
| # install cosign
 | |
| COPY --from=gcr.io/projectsigstore/cosign:v1.12.1@sha256:ac8e08a2141e093f4fd7d1d0b05448804eb3771b66574b13ad73e31b460af64d /ko-app/cosign /usr/bin/cosign
 | |
| 
 | |
| ENTRYPOINT ["/sbin/tini", "--", "/entrypoint.sh"]
 | |
| CMD [ "-h" ]
 | |
| 
 | |
| COPY scripts/entrypoint.sh /entrypoint.sh
 | |
| RUN chmod +x /entrypoint.sh
 | |
| 
 | |
| COPY goreleaser_*.apk /tmp/
 | |
| RUN apk add --no-cache --allow-untrusted /tmp/goreleaser_*.apk
 |