From 560a75f6b108c9d83828eef12413994002a52e17 Mon Sep 17 00:00:00 2001 From: gervasek <gervais.seb@gmail.com> Date: Wed, 8 Jan 2025 13:38:09 +0000 Subject: [PATCH 01/25] FPFISSUPP-28690: add python safety --- requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/requirements.txt b/requirements.txt index ed6a193..1dbc4de 100644 --- a/requirements.txt +++ b/requirements.txt @@ -15,3 +15,4 @@ GitPython python-hcl2 atlassian-python-api PyGithub +safety \ No newline at end of file -- GitLab From e366ae26bb4ad64778c69cc5c93c850c1806f3ea Mon Sep 17 00:00:00 2001 From: gervasek <gervais.seb@gmail.com> Date: Wed, 8 Jan 2025 16:47:44 +0000 Subject: [PATCH 02/25] Update file Dockerfile --- Dockerfile | 2 ++ 1 file changed, 2 insertions(+) diff --git a/Dockerfile b/Dockerfile index fdf716e..c2566ac 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,7 @@ FROM public.ecr.aws/ubuntu/ubuntu:22.04 as curl RUN apt-get update && apt-get -y install curl unzip ca-certificates --no-install-recommends +RUN curl -s https://api.github.com/repos/hadolint/hadolint/releases/latest +RUN curl -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}' RUN curl -sL "$(curl -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}')" -o /tmp/hadolint RUN curl -sL "$(curl -s https://api.github.com/repos/terraform-linters/tflint/releases/latest | grep browser | grep linux_amd64 | awk -F '\"' '{print $4}')" -o /tmp/tflint.zip && \ unzip /tmp/tflint.zip -d /tmp/ -- GitLab From 363d0403994b7ea5967d56eb1e3f28983240c3c4 Mon Sep 17 00:00:00 2001 From: gervasek <gervais.seb@gmail.com> Date: Wed, 8 Jan 2025 16:52:29 +0000 Subject: [PATCH 03/25] Update file Dockerfile --- Dockerfile | 2 -- 1 file changed, 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index c2566ac..fdf716e 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,7 +1,5 @@ FROM public.ecr.aws/ubuntu/ubuntu:22.04 as curl RUN apt-get update && apt-get -y install curl unzip ca-certificates --no-install-recommends -RUN curl -s https://api.github.com/repos/hadolint/hadolint/releases/latest -RUN curl -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}' RUN curl -sL "$(curl -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}')" -o /tmp/hadolint RUN curl -sL "$(curl -s https://api.github.com/repos/terraform-linters/tflint/releases/latest | grep browser | grep linux_amd64 | awk -F '\"' '{print $4}')" -o /tmp/tflint.zip && \ unzip /tmp/tflint.zip -d /tmp/ -- GitLab From 83846e50513d22f7145580018e52b57cb2b47188 Mon Sep 17 00:00:00 2001 From: gervasek <gervais.seb@gmail.com> Date: Wed, 8 Jan 2025 17:04:05 +0000 Subject: [PATCH 04/25] Update 2 files - /README.md - /.gitlab-ci.yml --- .gitlab-ci.yml | 2 +- README.md | 7 +++++++ 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index 48758cd..8c76dd6 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -20,4 +20,4 @@ versions: when: never - if: '$CI_COMMIT_REF_NAME == "master"' when: never - - when: always + - when: on_success diff --git a/README.md b/README.md index 5c1e6e9..37bd539 100644 --- a/README.md +++ b/README.md @@ -21,6 +21,13 @@ Pylint is a Python static code analysis tool which looks for programming errors, - [Source Code](https://github.com/PyCQA/pylint/) - [Documentation](https://www.pylint.org/) +### `safety` + +Safety CLI is a Python dependency vulnerability scanner designed to enhance software supply chain security by detecting packages with known vulnerabilities. + +- [Source Code](https://github.com/pyupio/safety) +- [Documentation](https://safetycli.com/product/safety-cli) + ### `gixy` Nginx configuration static analyzer. -- GitLab From dd3c463388ee5d0bfd4adeffd5c1f7e44b449382 Mon Sep 17 00:00:00 2001 From: gervasek <gervais.seb@gmail.com> Date: Wed, 8 Jan 2025 17:13:42 +0000 Subject: [PATCH 05/25] Update file .gitlab-ci.yml --- .gitlab-ci.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index 8c76dd6..68f6cbd 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -15,6 +15,7 @@ versions: - tflint --version - terraform-docs --version - shellcheck --version + - safety --version rules: - if: '$CI_PIPELINE_SOURCE == "merge_request_event"' when: never -- GitLab From 5d1020aba4e0814a51019558f007b1688011cbc9 Mon Sep 17 00:00:00 2001 From: gervasek <gervais.seb@gmail.com> Date: Thu, 9 Jan 2025 11:15:52 +0000 Subject: [PATCH 06/25] Update file Dockerfile --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index fdf716e..445a8b2 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,6 +1,6 @@ FROM public.ecr.aws/ubuntu/ubuntu:22.04 as curl RUN apt-get update && apt-get -y install curl unzip ca-certificates --no-install-recommends -RUN curl -sL "$(curl -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}')" -o /tmp/hadolint +RUN set -x && curl -sL "$(curl -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}')" -o /tmp/hadolint RUN curl -sL "$(curl -s https://api.github.com/repos/terraform-linters/tflint/releases/latest | grep browser | grep linux_amd64 | awk -F '\"' '{print $4}')" -o /tmp/tflint.zip && \ unzip /tmp/tflint.zip -d /tmp/ RUN curl -sL "$(curl -s https://api.github.com/repos/terraform-docs/terraform-docs/releases/latest | grep browser | grep linux-amd64 | awk -F '\"' '{print $4}')" -o /tmp/tfdocs.tar.gz && \ -- GitLab From feee99ce7a03328a7fadc1b094753b47ac659a79 Mon Sep 17 00:00:00 2001 From: gervasek <gervais.seb@gmail.com> Date: Thu, 9 Jan 2025 11:18:19 +0000 Subject: [PATCH 07/25] Update file Dockerfile --- Dockerfile | 2 ++ 1 file changed, 2 insertions(+) diff --git a/Dockerfile b/Dockerfile index 445a8b2..4f214ee 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,7 @@ FROM public.ecr.aws/ubuntu/ubuntu:22.04 as curl RUN apt-get update && apt-get -y install curl unzip ca-certificates --no-install-recommends +RUN curl -s https://api.github.com/repos/hadolint/hadolint/releases/latest +RUN curl -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}' RUN set -x && curl -sL "$(curl -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}')" -o /tmp/hadolint RUN curl -sL "$(curl -s https://api.github.com/repos/terraform-linters/tflint/releases/latest | grep browser | grep linux_amd64 | awk -F '\"' '{print $4}')" -o /tmp/tflint.zip && \ unzip /tmp/tflint.zip -d /tmp/ -- GitLab From b0a1afaf5e1a0b0a5c9db405775dafc452dd1262 Mon Sep 17 00:00:00 2001 From: gervasek <gervais.seb@gmail.com> Date: Thu, 9 Jan 2025 11:27:43 +0000 Subject: [PATCH 08/25] Update file Dockerfile --- Dockerfile | 32 ++++++++++++++++---------------- 1 file changed, 16 insertions(+), 16 deletions(-) diff --git a/Dockerfile b/Dockerfile index 4f214ee..47009d5 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,16 +1,16 @@ -FROM public.ecr.aws/ubuntu/ubuntu:22.04 as curl -RUN apt-get update && apt-get -y install curl unzip ca-certificates --no-install-recommends -RUN curl -s https://api.github.com/repos/hadolint/hadolint/releases/latest -RUN curl -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}' -RUN set -x && curl -sL "$(curl -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}')" -o /tmp/hadolint -RUN curl -sL "$(curl -s https://api.github.com/repos/terraform-linters/tflint/releases/latest | grep browser | grep linux_amd64 | awk -F '\"' '{print $4}')" -o /tmp/tflint.zip && \ +FROM public.ecr.aws/ubuntu/ubuntu:22.04 as curl -H "Authorization: token $GITHUB_API_TOKEN" +RUN apt-get update && apt-get -y install curl -H "Authorization: token $GITHUB_API_TOKEN" unzip ca-certificates --no-install-recommends +RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest +RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}' +RUN set -x && curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H "Authorization: token $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}')" -o /tmp/hadolint +RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H "Authorization: token $GITHUB_API_TOKEN" -s https://api.github.com/repos/terraform-linters/tflint/releases/latest | grep browser | grep linux_amd64 | awk -F '\"' '{print $4}')" -o /tmp/tflint.zip && \ unzip /tmp/tflint.zip -d /tmp/ -RUN curl -sL "$(curl -s https://api.github.com/repos/terraform-docs/terraform-docs/releases/latest | grep browser | grep linux-amd64 | awk -F '\"' '{print $4}')" -o /tmp/tfdocs.tar.gz && \ +RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H "Authorization: token $GITHUB_API_TOKEN" -s https://api.github.com/repos/terraform-docs/terraform-docs/releases/latest | grep browser | grep linux-amd64 | awk -F '\"' '{print $4}')" -o /tmp/tfdocs.tar.gz && \ tar xf /tmp/tfdocs.tar.gz -C /tmp/ -RUN curl -sL "$(curl -s https://api.github.com/repos/zegl/kube-score/releases/latest | grep browser | grep linux_amd64 | head -1 | awk -F '\"' '{print $4}')" -o /tmp/kube-score -RUN curl -sL "$(curl -s https://api.github.com/repos/yannh/kubeconform/releases/latest | grep browser | grep linux-amd64 | awk -F '\"' '{print $4}')" -o /tmp/kubeconform.tar.gz && \ +RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H "Authorization: token $GITHUB_API_TOKEN" -s https://api.github.com/repos/zegl/kube-score/releases/latest | grep browser | grep linux_amd64 | head -1 | awk -F '\"' '{print $4}')" -o /tmp/kube-score +RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H "Authorization: token $GITHUB_API_TOKEN" -s https://api.github.com/repos/yannh/kubeconform/releases/latest | grep browser | grep linux-amd64 | awk -F '\"' '{print $4}')" -o /tmp/kubeconform.tar.gz && \ tar xf /tmp/kubeconform.tar.gz -C /tmp/ -RUN curl -sL "$(curl -s https://api.github.com/repos/norwoodj/helm-docs/releases/latest | grep browser | grep Linux_x86_64.tar.gz | awk -F '\"' '{print $4}')" -o /tmp/helm-docs.tar.gz && \ +RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H "Authorization: token $GITHUB_API_TOKEN" -s https://api.github.com/repos/norwoodj/helm-docs/releases/latest | grep browser | grep Linux_x86_64.tar.gz | awk -F '\"' '{print $4}')" -o /tmp/helm-docs.tar.gz && \ tar xf /tmp/helm-docs.tar.gz -C /tmp/ FROM public.ecr.aws/ubuntu/ubuntu:22.04 @@ -18,11 +18,11 @@ RUN apt-get update && apt-get install -y git shellcheck python3-pip python-is-py COPY requirements.txt /requirements.txt RUN pip --no-cache-dir install -r requirements.txt ADD https://raw.githubusercontent.com/saltstack/salt/master/.pylintrc /etc/saltpylint -COPY --from=curl --chown=root:root --chmod=555 /tmp/hadolint /usr/local/bin/hadolint -COPY --from=curl --chown=root:root --chmod=555 /tmp/tflint /usr/local/bin/tflint +COPY --from=curl -H "Authorization: token $GITHUB_API_TOKEN" --chown=root:root --chmod=555 /tmp/hadolint /usr/local/bin/hadolint +COPY --from=curl -H "Authorization: token $GITHUB_API_TOKEN" --chown=root:root --chmod=555 /tmp/tflint /usr/local/bin/tflint COPY .tflint.hcl /root/ -COPY --from=curl --chown=root:root --chmod=555 /tmp/terraform-docs /usr/local/bin/terraform-docs -COPY --from=curl --chown=root:root --chmod=555 /tmp/kube-score /usr/local/bin/kube-score -COPY --from=curl --chown=root:root --chmod=555 /tmp/kubeconform /usr/local/bin/kubeconform -COPY --from=curl --chown=root:root --chmod=555 /tmp/helm-docs /usr/local/bin/helm-docs +COPY --from=curl -H "Authorization: token $GITHUB_API_TOKEN" --chown=root:root --chmod=555 /tmp/terraform-docs /usr/local/bin/terraform-docs +COPY --from=curl -H "Authorization: token $GITHUB_API_TOKEN" --chown=root:root --chmod=555 /tmp/kube-score /usr/local/bin/kube-score +COPY --from=curl -H "Authorization: token $GITHUB_API_TOKEN" --chown=root:root --chmod=555 /tmp/kubeconform /usr/local/bin/kubeconform +COPY --from=curl -H "Authorization: token $GITHUB_API_TOKEN" --chown=root:root --chmod=555 /tmp/helm-docs /usr/local/bin/helm-docs RUN tflint --init -- GitLab From fc55fcc7a07bab7a1cdbcca7bfbe49f42a3cd9d0 Mon Sep 17 00:00:00 2001 From: gervasek <gervais.seb@gmail.com> Date: Thu, 9 Jan 2025 11:27:54 +0000 Subject: [PATCH 09/25] Update file Dockerfile --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 47009d5..6b18b64 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,5 @@ FROM public.ecr.aws/ubuntu/ubuntu:22.04 as curl -H "Authorization: token $GITHUB_API_TOKEN" -RUN apt-get update && apt-get -y install curl -H "Authorization: token $GITHUB_API_TOKEN" unzip ca-certificates --no-install-recommends +RUN apt-get update && apt-get -y install curl unzip ca-certificates --no-install-recommends RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}' RUN set -x && curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H "Authorization: token $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}')" -o /tmp/hadolint -- GitLab From 1503ca311da24d6408ec0c6b8feeba8f82694fde Mon Sep 17 00:00:00 2001 From: gervasek <gervais.seb@gmail.com> Date: Thu, 9 Jan 2025 11:30:03 +0000 Subject: [PATCH 10/25] Update file Dockerfile --- Dockerfile | 24 ++++++++++++------------ 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/Dockerfile b/Dockerfile index 6b18b64..3ea3782 100644 --- a/Dockerfile +++ b/Dockerfile @@ -2,15 +2,15 @@ FROM public.ecr.aws/ubuntu/ubuntu:22.04 as curl -H "Authorization: token $GITHUB RUN apt-get update && apt-get -y install curl unzip ca-certificates --no-install-recommends RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}' -RUN set -x && curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H "Authorization: token $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}')" -o /tmp/hadolint -RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H "Authorization: token $GITHUB_API_TOKEN" -s https://api.github.com/repos/terraform-linters/tflint/releases/latest | grep browser | grep linux_amd64 | awk -F '\"' '{print $4}')" -o /tmp/tflint.zip && \ +RUN set -x && curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: token $GITHUB_API_TOKEN\" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}')" -o /tmp/hadolint +RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: token $GITHUB_API_TOKEN\" -s https://api.github.com/repos/terraform-linters/tflint/releases/latest | grep browser | grep linux_amd64 | awk -F '\"' '{print $4}')" -o /tmp/tflint.zip && \ unzip /tmp/tflint.zip -d /tmp/ -RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H "Authorization: token $GITHUB_API_TOKEN" -s https://api.github.com/repos/terraform-docs/terraform-docs/releases/latest | grep browser | grep linux-amd64 | awk -F '\"' '{print $4}')" -o /tmp/tfdocs.tar.gz && \ +RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: token $GITHUB_API_TOKEN\" -s https://api.github.com/repos/terraform-docs/terraform-docs/releases/latest | grep browser | grep linux-amd64 | awk -F '\"' '{print $4}')" -o /tmp/tfdocs.tar.gz && \ tar xf /tmp/tfdocs.tar.gz -C /tmp/ -RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H "Authorization: token $GITHUB_API_TOKEN" -s https://api.github.com/repos/zegl/kube-score/releases/latest | grep browser | grep linux_amd64 | head -1 | awk -F '\"' '{print $4}')" -o /tmp/kube-score -RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H "Authorization: token $GITHUB_API_TOKEN" -s https://api.github.com/repos/yannh/kubeconform/releases/latest | grep browser | grep linux-amd64 | awk -F '\"' '{print $4}')" -o /tmp/kubeconform.tar.gz && \ +RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: token $GITHUB_API_TOKEN\" -s https://api.github.com/repos/zegl/kube-score/releases/latest | grep browser | grep linux_amd64 | head -1 | awk -F '\"' '{print $4}')" -o /tmp/kube-score +RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: token $GITHUB_API_TOKEN\" -s https://api.github.com/repos/yannh/kubeconform/releases/latest | grep browser | grep linux-amd64 | awk -F '\"' '{print $4}')" -o /tmp/kubeconform.tar.gz && \ tar xf /tmp/kubeconform.tar.gz -C /tmp/ -RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H "Authorization: token $GITHUB_API_TOKEN" -s https://api.github.com/repos/norwoodj/helm-docs/releases/latest | grep browser | grep Linux_x86_64.tar.gz | awk -F '\"' '{print $4}')" -o /tmp/helm-docs.tar.gz && \ +RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: token $GITHUB_API_TOKEN\" -s https://api.github.com/repos/norwoodj/helm-docs/releases/latest | grep browser | grep Linux_x86_64.tar.gz | awk -F '\"' '{print $4}')" -o /tmp/helm-docs.tar.gz && \ tar xf /tmp/helm-docs.tar.gz -C /tmp/ FROM public.ecr.aws/ubuntu/ubuntu:22.04 @@ -18,11 +18,11 @@ RUN apt-get update && apt-get install -y git shellcheck python3-pip python-is-py COPY requirements.txt /requirements.txt RUN pip --no-cache-dir install -r requirements.txt ADD https://raw.githubusercontent.com/saltstack/salt/master/.pylintrc /etc/saltpylint -COPY --from=curl -H "Authorization: token $GITHUB_API_TOKEN" --chown=root:root --chmod=555 /tmp/hadolint /usr/local/bin/hadolint -COPY --from=curl -H "Authorization: token $GITHUB_API_TOKEN" --chown=root:root --chmod=555 /tmp/tflint /usr/local/bin/tflint +COPY --from=curl --chown=root:root --chmod=555 /tmp/hadolint /usr/local/bin/hadolint +COPY --from=curl --chown=root:root --chmod=555 /tmp/tflint /usr/local/bin/tflint COPY .tflint.hcl /root/ -COPY --from=curl -H "Authorization: token $GITHUB_API_TOKEN" --chown=root:root --chmod=555 /tmp/terraform-docs /usr/local/bin/terraform-docs -COPY --from=curl -H "Authorization: token $GITHUB_API_TOKEN" --chown=root:root --chmod=555 /tmp/kube-score /usr/local/bin/kube-score -COPY --from=curl -H "Authorization: token $GITHUB_API_TOKEN" --chown=root:root --chmod=555 /tmp/kubeconform /usr/local/bin/kubeconform -COPY --from=curl -H "Authorization: token $GITHUB_API_TOKEN" --chown=root:root --chmod=555 /tmp/helm-docs /usr/local/bin/helm-docs +COPY --from=curl --chown=root:root --chmod=555 /tmp/terraform-docs /usr/local/bin/terraform-docs +COPY --from=curl --chown=root:root --chmod=555 /tmp/kube-score /usr/local/bin/kube-score +COPY --from=curl --chown=root:root --chmod=555 /tmp/kubeconform /usr/local/bin/kubeconform +COPY --from=curl --chown=root:root --chmod=555 /tmp/helm-docs /usr/local/bin/helm-docs RUN tflint --init -- GitLab From f47ade6aa811040289ec6a447a0c9b2d35c9a38c Mon Sep 17 00:00:00 2001 From: gervasek <gervais.seb@gmail.com> Date: Thu, 9 Jan 2025 11:36:36 +0000 Subject: [PATCH 11/25] Update file Dockerfile --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 3ea3782..e970896 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM public.ecr.aws/ubuntu/ubuntu:22.04 as curl -H "Authorization: token $GITHUB_API_TOKEN" +FROM public.ecr.aws/ubuntu/ubuntu:22.04 as curl RUN apt-get update && apt-get -y install curl unzip ca-certificates --no-install-recommends RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}' -- GitLab From 562e9d31165364849d17830c1db52050ccebfa6b Mon Sep 17 00:00:00 2001 From: gervasek <gervais.seb@gmail.com> Date: Thu, 9 Jan 2025 11:49:59 +0000 Subject: [PATCH 12/25] Update file Dockerfile --- Dockerfile | 1 - 1 file changed, 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index e970896..663a482 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,6 +1,5 @@ FROM public.ecr.aws/ubuntu/ubuntu:22.04 as curl RUN apt-get update && apt-get -y install curl unzip ca-certificates --no-install-recommends -RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}' RUN set -x && curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: token $GITHUB_API_TOKEN\" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}')" -o /tmp/hadolint RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: token $GITHUB_API_TOKEN\" -s https://api.github.com/repos/terraform-linters/tflint/releases/latest | grep browser | grep linux_amd64 | awk -F '\"' '{print $4}')" -o /tmp/tflint.zip && \ -- GitLab From f9727f5621adbc2030f62f98da86d79ec6830e00 Mon Sep 17 00:00:00 2001 From: gervasek <gervais.seb@gmail.com> Date: Thu, 9 Jan 2025 11:50:46 +0000 Subject: [PATCH 13/25] Update file Dockerfile --- Dockerfile | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 663a482..e9faaf7 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,7 +1,6 @@ FROM public.ecr.aws/ubuntu/ubuntu:22.04 as curl RUN apt-get update && apt-get -y install curl unzip ca-certificates --no-install-recommends -RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}' -RUN set -x && curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: token $GITHUB_API_TOKEN\" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}')" -o /tmp/hadolint +RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: token $GITHUB_API_TOKEN\" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}')" -o /tmp/hadolint RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: token $GITHUB_API_TOKEN\" -s https://api.github.com/repos/terraform-linters/tflint/releases/latest | grep browser | grep linux_amd64 | awk -F '\"' '{print $4}')" -o /tmp/tflint.zip && \ unzip /tmp/tflint.zip -d /tmp/ RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: token $GITHUB_API_TOKEN\" -s https://api.github.com/repos/terraform-docs/terraform-docs/releases/latest | grep browser | grep linux-amd64 | awk -F '\"' '{print $4}')" -o /tmp/tfdocs.tar.gz && \ -- GitLab From 3b8e8c972cd487456696ed8de2d93f284250ea46 Mon Sep 17 00:00:00 2001 From: gervasek <gervais.seb@gmail.com> Date: Thu, 9 Jan 2025 11:57:45 +0000 Subject: [PATCH 14/25] Update file Dockerfile --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index e9faaf7..ef6e62c 100644 --- a/Dockerfile +++ b/Dockerfile @@ -23,4 +23,4 @@ COPY --from=curl --chown=root:root --chmod=555 /tmp/terraform-docs /usr/local/bi COPY --from=curl --chown=root:root --chmod=555 /tmp/kube-score /usr/local/bin/kube-score COPY --from=curl --chown=root:root --chmod=555 /tmp/kubeconform /usr/local/bin/kubeconform COPY --from=curl --chown=root:root --chmod=555 /tmp/helm-docs /usr/local/bin/helm-docs -RUN tflint --init +RUN GITHUB_TOKEN=${GITHUB_API_TOKEN} tflint --init -- GitLab From 03760ea40091ed049a8d4b770114d56ea978e4f9 Mon Sep 17 00:00:00 2001 From: gervasek <gervais.seb@gmail.com> Date: Thu, 9 Jan 2025 12:01:09 +0000 Subject: [PATCH 15/25] Update file Dockerfile --- Dockerfile | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/Dockerfile b/Dockerfile index ef6e62c..1a5e06b 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,14 +1,14 @@ FROM public.ecr.aws/ubuntu/ubuntu:22.04 as curl RUN apt-get update && apt-get -y install curl unzip ca-certificates --no-install-recommends -RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: token $GITHUB_API_TOKEN\" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}')" -o /tmp/hadolint -RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: token $GITHUB_API_TOKEN\" -s https://api.github.com/repos/terraform-linters/tflint/releases/latest | grep browser | grep linux_amd64 | awk -F '\"' '{print $4}')" -o /tmp/tflint.zip && \ +RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: Bearer $GITHUB_API_TOKEN\" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}')" -o /tmp/hadolint +RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: Bearer $GITHUB_API_TOKEN\" -s https://api.github.com/repos/terraform-linters/tflint/releases/latest | grep browser | grep linux_amd64 | awk -F '\"' '{print $4}')" -o /tmp/tflint.zip && \ unzip /tmp/tflint.zip -d /tmp/ -RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: token $GITHUB_API_TOKEN\" -s https://api.github.com/repos/terraform-docs/terraform-docs/releases/latest | grep browser | grep linux-amd64 | awk -F '\"' '{print $4}')" -o /tmp/tfdocs.tar.gz && \ +RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: Bearer $GITHUB_API_TOKEN\" -s https://api.github.com/repos/terraform-docs/terraform-docs/releases/latest | grep browser | grep linux-amd64 | awk -F '\"' '{print $4}')" -o /tmp/tfdocs.tar.gz && \ tar xf /tmp/tfdocs.tar.gz -C /tmp/ -RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: token $GITHUB_API_TOKEN\" -s https://api.github.com/repos/zegl/kube-score/releases/latest | grep browser | grep linux_amd64 | head -1 | awk -F '\"' '{print $4}')" -o /tmp/kube-score -RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: token $GITHUB_API_TOKEN\" -s https://api.github.com/repos/yannh/kubeconform/releases/latest | grep browser | grep linux-amd64 | awk -F '\"' '{print $4}')" -o /tmp/kubeconform.tar.gz && \ +RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: Bearer $GITHUB_API_TOKEN\" -s https://api.github.com/repos/zegl/kube-score/releases/latest | grep browser | grep linux_amd64 | head -1 | awk -F '\"' '{print $4}')" -o /tmp/kube-score +RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: Bearer $GITHUB_API_TOKEN\" -s https://api.github.com/repos/yannh/kubeconform/releases/latest | grep browser | grep linux-amd64 | awk -F '\"' '{print $4}')" -o /tmp/kubeconform.tar.gz && \ tar xf /tmp/kubeconform.tar.gz -C /tmp/ -RUN curl -H "Authorization: token $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: token $GITHUB_API_TOKEN\" -s https://api.github.com/repos/norwoodj/helm-docs/releases/latest | grep browser | grep Linux_x86_64.tar.gz | awk -F '\"' '{print $4}')" -o /tmp/helm-docs.tar.gz && \ +RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: Bearer $GITHUB_API_TOKEN\" -s https://api.github.com/repos/norwoodj/helm-docs/releases/latest | grep browser | grep Linux_x86_64.tar.gz | awk -F '\"' '{print $4}')" -o /tmp/helm-docs.tar.gz && \ tar xf /tmp/helm-docs.tar.gz -C /tmp/ FROM public.ecr.aws/ubuntu/ubuntu:22.04 -- GitLab From 0fad2c37dd8ef69dd2488ddc4bde95c83a95510f Mon Sep 17 00:00:00 2001 From: gervasek <gervais.seb@gmail.com> Date: Thu, 9 Jan 2025 12:13:29 +0000 Subject: [PATCH 16/25] Update file Dockerfile --- Dockerfile | 1 + 1 file changed, 1 insertion(+) diff --git a/Dockerfile b/Dockerfile index 1a5e06b..ff91c0a 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,6 @@ FROM public.ecr.aws/ubuntu/ubuntu:22.04 as curl RUN apt-get update && apt-get -y install curl unzip ca-certificates --no-install-recommends +RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: Bearer $GITHUB_API_TOKEN\" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}')" -o /tmp/hadolint RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: Bearer $GITHUB_API_TOKEN\" -s https://api.github.com/repos/terraform-linters/tflint/releases/latest | grep browser | grep linux_amd64 | awk -F '\"' '{print $4}')" -o /tmp/tflint.zip && \ unzip /tmp/tflint.zip -d /tmp/ -- GitLab From c63475560e77093d488ae89c76b03dae1020cda8 Mon Sep 17 00:00:00 2001 From: gervasek <gervais.seb@gmail.com> Date: Thu, 9 Jan 2025 12:17:23 +0000 Subject: [PATCH 17/25] Update file Dockerfile --- Dockerfile | 1 + 1 file changed, 1 insertion(+) diff --git a/Dockerfile b/Dockerfile index ff91c0a..11e4f68 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,6 @@ FROM public.ecr.aws/ubuntu/ubuntu:22.04 as curl RUN apt-get update && apt-get -y install curl unzip ca-certificates --no-install-recommends +RUN echo $GITHUB_API_TOKEN RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: Bearer $GITHUB_API_TOKEN\" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}')" -o /tmp/hadolint RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: Bearer $GITHUB_API_TOKEN\" -s https://api.github.com/repos/terraform-linters/tflint/releases/latest | grep browser | grep linux_amd64 | awk -F '\"' '{print $4}')" -o /tmp/tflint.zip && \ -- GitLab From eff62e9a9ec1a3f687b7c51346bef00816035be2 Mon Sep 17 00:00:00 2001 From: gervasek <gervais.seb@gmail.com> Date: Thu, 9 Jan 2025 12:22:09 +0000 Subject: [PATCH 18/25] Update 2 files - /Dockerfile - /.gitlab-ci.yml --- .gitlab-ci.yml | 10 ++++++++++ Dockerfile | 2 ++ 2 files changed, 12 insertions(+) diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index 68f6cbd..a89ef94 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -3,6 +3,16 @@ include: ref: master file: ".gitlab-ci.yml" +docker-build: + script: | + echo "[INFO] Build and push the image ${FULL_IMAGE}" + /kaniko/executor --context $CI_PROJECT_DIR \ + --dockerfile $CI_PROJECT_DIR/Dockerfile \ + --build-arg CI_JOB_TOKEN=${CI_JOB_TOKEN} \ + --build-arg GITHUB_API_TOKEN=${GITHUB_API_TOKEN} \ + --destination ${FULL_IMAGE} \ + --cleanup + versions: stage: test image: ${CI_REGISTRY_IMAGE}:${CI_COMMIT_REF_SLUG} diff --git a/Dockerfile b/Dockerfile index 11e4f68..032f308 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,5 @@ FROM public.ecr.aws/ubuntu/ubuntu:22.04 as curl +ARG GITHUB_API_TOKEN RUN apt-get update && apt-get -y install curl unzip ca-certificates --no-install-recommends RUN echo $GITHUB_API_TOKEN RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest @@ -14,6 +15,7 @@ RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL "$(curl -H \"Authoriza tar xf /tmp/helm-docs.tar.gz -C /tmp/ FROM public.ecr.aws/ubuntu/ubuntu:22.04 +ARG GITHUB_API_TOKEN RUN apt-get update && apt-get install -y git shellcheck python3-pip python-is-python3 --no-install-recommends && apt-get clean && rm -rf /var/lib/apt/lists/* COPY requirements.txt /requirements.txt RUN pip --no-cache-dir install -r requirements.txt -- GitLab From e46baffe515106b9a8893e04d83695955c6d0ac3 Mon Sep 17 00:00:00 2001 From: gervasek <gervais.seb@gmail.com> Date: Thu, 9 Jan 2025 12:24:50 +0000 Subject: [PATCH 19/25] Update file Dockerfile --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 032f308..b04b4cd 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,8 +1,8 @@ FROM public.ecr.aws/ubuntu/ubuntu:22.04 as curl ARG GITHUB_API_TOKEN RUN apt-get update && apt-get -y install curl unzip ca-certificates --no-install-recommends -RUN echo $GITHUB_API_TOKEN RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest +RUn curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}' RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: Bearer $GITHUB_API_TOKEN\" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}')" -o /tmp/hadolint RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: Bearer $GITHUB_API_TOKEN\" -s https://api.github.com/repos/terraform-linters/tflint/releases/latest | grep browser | grep linux_amd64 | awk -F '\"' '{print $4}')" -o /tmp/tflint.zip && \ unzip /tmp/tflint.zip -d /tmp/ -- GitLab From 979bcad7011ffd15377cdfad68b8b9acc30167f9 Mon Sep 17 00:00:00 2001 From: gervasek <gervais.seb@gmail.com> Date: Thu, 9 Jan 2025 12:28:27 +0000 Subject: [PATCH 20/25] Update file Dockerfile --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index b04b4cd..2209420 100644 --- a/Dockerfile +++ b/Dockerfile @@ -3,7 +3,7 @@ ARG GITHUB_API_TOKEN RUN apt-get update && apt-get -y install curl unzip ca-certificates --no-install-recommends RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest RUn curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}' -RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: Bearer $GITHUB_API_TOKEN\" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}')" -o /tmp/hadolint +RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL $(curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '"' '{print $4}')" -o /tmp/hadolint RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: Bearer $GITHUB_API_TOKEN\" -s https://api.github.com/repos/terraform-linters/tflint/releases/latest | grep browser | grep linux_amd64 | awk -F '\"' '{print $4}')" -o /tmp/tflint.zip && \ unzip /tmp/tflint.zip -d /tmp/ RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: Bearer $GITHUB_API_TOKEN\" -s https://api.github.com/repos/terraform-docs/terraform-docs/releases/latest | grep browser | grep linux-amd64 | awk -F '\"' '{print $4}')" -o /tmp/tfdocs.tar.gz && \ -- GitLab From dac5cfbea81ec84daa710b643c9d1ee02f827e46 Mon Sep 17 00:00:00 2001 From: gervasek <gervais.seb@gmail.com> Date: Thu, 9 Jan 2025 12:28:52 +0000 Subject: [PATCH 21/25] Update file Dockerfile --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 2209420..c25b35e 100644 --- a/Dockerfile +++ b/Dockerfile @@ -3,7 +3,7 @@ ARG GITHUB_API_TOKEN RUN apt-get update && apt-get -y install curl unzip ca-certificates --no-install-recommends RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest RUn curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}' -RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL $(curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '"' '{print $4}')" -o /tmp/hadolint +RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL $(curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '"' '{print $4}') -o /tmp/hadolint RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: Bearer $GITHUB_API_TOKEN\" -s https://api.github.com/repos/terraform-linters/tflint/releases/latest | grep browser | grep linux_amd64 | awk -F '\"' '{print $4}')" -o /tmp/tflint.zip && \ unzip /tmp/tflint.zip -d /tmp/ RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: Bearer $GITHUB_API_TOKEN\" -s https://api.github.com/repos/terraform-docs/terraform-docs/releases/latest | grep browser | grep linux-amd64 | awk -F '\"' '{print $4}')" -o /tmp/tfdocs.tar.gz && \ -- GitLab From 4c29440bfdb729cd6acf57a511e2d5d467554ec4 Mon Sep 17 00:00:00 2001 From: gervasek <gervais.seb@gmail.com> Date: Thu, 9 Jan 2025 12:33:49 +0000 Subject: [PATCH 22/25] Update file Dockerfile --- Dockerfile | 1 + 1 file changed, 1 insertion(+) diff --git a/Dockerfile b/Dockerfile index c25b35e..302d788 100644 --- a/Dockerfile +++ b/Dockerfile @@ -3,6 +3,7 @@ ARG GITHUB_API_TOKEN RUN apt-get update && apt-get -y install curl unzip ca-certificates --no-install-recommends RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest RUn curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}' +RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL https://github.com/hadolint/hadolint/releases/download/v2.12.0/hadolint-Linux-x86_64 -o /tmp/hadolint RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL $(curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '"' '{print $4}') -o /tmp/hadolint RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: Bearer $GITHUB_API_TOKEN\" -s https://api.github.com/repos/terraform-linters/tflint/releases/latest | grep browser | grep linux_amd64 | awk -F '\"' '{print $4}')" -o /tmp/tflint.zip && \ unzip /tmp/tflint.zip -d /tmp/ -- GitLab From 11947e18cb5728ede97f1f496625bc46300a7ef3 Mon Sep 17 00:00:00 2001 From: gervasek <gervais.seb@gmail.com> Date: Thu, 9 Jan 2025 12:38:46 +0000 Subject: [PATCH 23/25] Update file Dockerfile --- Dockerfile | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/Dockerfile b/Dockerfile index 302d788..01d844c 100644 --- a/Dockerfile +++ b/Dockerfile @@ -5,14 +5,14 @@ RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/ RUn curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}' RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL https://github.com/hadolint/hadolint/releases/download/v2.12.0/hadolint-Linux-x86_64 -o /tmp/hadolint RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL $(curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '"' '{print $4}') -o /tmp/hadolint -RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: Bearer $GITHUB_API_TOKEN\" -s https://api.github.com/repos/terraform-linters/tflint/releases/latest | grep browser | grep linux_amd64 | awk -F '\"' '{print $4}')" -o /tmp/tflint.zip && \ +RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL $(curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/terraform-linters/tflint/releases/latest | grep browser | grep linux_amd64 | awk -F '\"' '{print $4}') -o /tmp/tflint.zip && \ unzip /tmp/tflint.zip -d /tmp/ -RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: Bearer $GITHUB_API_TOKEN\" -s https://api.github.com/repos/terraform-docs/terraform-docs/releases/latest | grep browser | grep linux-amd64 | awk -F '\"' '{print $4}')" -o /tmp/tfdocs.tar.gz && \ +RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL $(curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/terraform-docs/terraform-docs/releases/latest | grep browser | grep linux-amd64 | awk -F '\"' '{print $4}') -o /tmp/tfdocs.tar.gz && \ tar xf /tmp/tfdocs.tar.gz -C /tmp/ -RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: Bearer $GITHUB_API_TOKEN\" -s https://api.github.com/repos/zegl/kube-score/releases/latest | grep browser | grep linux_amd64 | head -1 | awk -F '\"' '{print $4}')" -o /tmp/kube-score -RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: Bearer $GITHUB_API_TOKEN\" -s https://api.github.com/repos/yannh/kubeconform/releases/latest | grep browser | grep linux-amd64 | awk -F '\"' '{print $4}')" -o /tmp/kubeconform.tar.gz && \ +RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL $(curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/zegl/kube-score/releases/latest | grep browser | grep linux_amd64 | head -1 | awk -F '\"' '{print $4}') -o /tmp/kube-score +RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL $(curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/yannh/kubeconform/releases/latest | grep browser | grep linux-amd64 | awk -F '\"' '{print $4}')" -o /tmp/kubeconform.tar.gz && \ tar xf /tmp/kubeconform.tar.gz -C /tmp/ -RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL "$(curl -H \"Authorization: Bearer $GITHUB_API_TOKEN\" -s https://api.github.com/repos/norwoodj/helm-docs/releases/latest | grep browser | grep Linux_x86_64.tar.gz | awk -F '\"' '{print $4}')" -o /tmp/helm-docs.tar.gz && \ +RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL $(curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/norwoodj/helm-docs/releases/latest | grep browser | grep Linux_x86_64.tar.gz | awk -F '\"' '{print $4}') -o /tmp/helm-docs.tar.gz && \ tar xf /tmp/helm-docs.tar.gz -C /tmp/ FROM public.ecr.aws/ubuntu/ubuntu:22.04 -- GitLab From d7a845c630467cc45f9fb96c8a9b7ca4d5577a42 Mon Sep 17 00:00:00 2001 From: gervasek <gervais.seb@gmail.com> Date: Thu, 9 Jan 2025 12:39:04 +0000 Subject: [PATCH 24/25] Update file Dockerfile --- Dockerfile | 3 --- 1 file changed, 3 deletions(-) diff --git a/Dockerfile b/Dockerfile index 01d844c..c4f2192 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,9 +1,6 @@ FROM public.ecr.aws/ubuntu/ubuntu:22.04 as curl ARG GITHUB_API_TOKEN RUN apt-get update && apt-get -y install curl unzip ca-certificates --no-install-recommends -RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest -RUn curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '\"' '{print $4}' -RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL https://github.com/hadolint/hadolint/releases/download/v2.12.0/hadolint-Linux-x86_64 -o /tmp/hadolint RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL $(curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/hadolint/hadolint/releases/latest | grep browser | grep Linux-x86_64 | head -1 | awk -F '"' '{print $4}') -o /tmp/hadolint RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL $(curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/terraform-linters/tflint/releases/latest | grep browser | grep linux_amd64 | awk -F '\"' '{print $4}') -o /tmp/tflint.zip && \ unzip /tmp/tflint.zip -d /tmp/ -- GitLab From 118a528a1ca7b0b04654972b1fbdd2fec4f8b0c2 Mon Sep 17 00:00:00 2001 From: gervasek <gervais.seb@gmail.com> Date: Thu, 9 Jan 2025 12:40:18 +0000 Subject: [PATCH 25/25] Update file Dockerfile --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index c4f2192..d1d4c99 100644 --- a/Dockerfile +++ b/Dockerfile @@ -7,7 +7,7 @@ RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL $(curl -H "Authorizati RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL $(curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/terraform-docs/terraform-docs/releases/latest | grep browser | grep linux-amd64 | awk -F '\"' '{print $4}') -o /tmp/tfdocs.tar.gz && \ tar xf /tmp/tfdocs.tar.gz -C /tmp/ RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL $(curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/zegl/kube-score/releases/latest | grep browser | grep linux_amd64 | head -1 | awk -F '\"' '{print $4}') -o /tmp/kube-score -RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL $(curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/yannh/kubeconform/releases/latest | grep browser | grep linux-amd64 | awk -F '\"' '{print $4}')" -o /tmp/kubeconform.tar.gz && \ +RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL $(curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/yannh/kubeconform/releases/latest | grep browser | grep linux-amd64 | awk -F '\"' '{print $4}') -o /tmp/kubeconform.tar.gz && \ tar xf /tmp/kubeconform.tar.gz -C /tmp/ RUN curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -sL $(curl -H "Authorization: Bearer $GITHUB_API_TOKEN" -s https://api.github.com/repos/norwoodj/helm-docs/releases/latest | grep browser | grep Linux_x86_64.tar.gz | awk -F '\"' '{print $4}') -o /tmp/helm-docs.tar.gz && \ tar xf /tmp/helm-docs.tar.gz -C /tmp/ -- GitLab