mirror of
https://github.com/moby/moby.git
synced 2026-08-13 17:06:44 +00:00
1aa73144f2
This release addresses breakage caused by a security patch included in Go 1.25.2 and 1.24.8, which enforced overly restrictive validation on the parsing of X.509 certificates. We've removed those restrictions while maintaining the security fix that the initial release addressed. Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
25 lines
605 B
Docker
25 lines
605 B
Docker
# syntax=docker/dockerfile:1
|
|
|
|
ARG GO_VERSION=1.25.3
|
|
ARG GOVULNCHECK_VERSION=v1.1.4
|
|
ARG FORMAT=text
|
|
|
|
FROM golang:${GO_VERSION}-alpine AS base
|
|
WORKDIR /go/src/github.com/moby/moby
|
|
RUN apk add --no-cache jq moreutils
|
|
ARG GOVULNCHECK_VERSION
|
|
RUN --mount=type=cache,target=/root/.cache \
|
|
--mount=type=cache,target=/go/pkg/mod \
|
|
go install golang.org/x/vuln/cmd/govulncheck@$GOVULNCHECK_VERSION
|
|
|
|
FROM base AS run
|
|
ARG FORMAT
|
|
RUN --mount=type=bind,target=.,rw <<EOT
|
|
set -ex
|
|
mkdir /out
|
|
govulncheck -format ${FORMAT} ./... | tee /out/govulncheck.out
|
|
EOT
|
|
|
|
FROM scratch AS output
|
|
COPY --from=run /out /
|