mirror of
https://github.com/enix/x509-certificate-exporter.git
synced 2026-08-19 03:56:21 +00:00
39 lines
2.1 KiB
Go
39 lines
2.1 KiB
Go
package main
|
|
|
|
import (
|
|
"dagger/x-509-ce/internal/dagger"
|
|
)
|
|
|
|
// Pinned image versions. Renovate's `regex` manager (configured in
|
|
// renovate.json5) tracks the `<name>Image = "..."` literals here.
|
|
const (
|
|
golangImage = "golang:1.26.4-alpine@sha256:3ad57304ad93bbec8548a0437ad9e06a455660655d9af011d58b993f6f615648"
|
|
alpineImage = "alpine:3.24.0@sha256:a2d49ea686c2adfe3c992e47dc3b5e7fa6e6b5055609400dc2acaeb241c829f4"
|
|
helmImage = "alpine/helm:4.2.1@sha256:8647f126de3578d74f947ba735e4cfa0ea6aea7d6e2f36bceb86f31415944dca"
|
|
renovateImage = "renovate/renovate:43.224.0@sha256:917942c6021720b042ef2bfce54455497ac92d24396b7b4b2a97ef6513697bc4"
|
|
helmDocsImage = "jnorwood/helm-docs:v1.14.2@sha256:7e562b49ab6b1dbc50c3da8f2dd6ffa8a5c6bba327b1c6335cc15ce29267979c"
|
|
helmSchemaImage = "ghcr.io/dadav/helm-schema:0.23.2@sha256:4807d868cb489e8160e0cece1aba51d2101a9c307b76bdda4f88929c75bd5c29"
|
|
markdownlintImage = "davidanson/markdownlint-cli2:v0.22.1@sha256:0ed9a5f4c77ef447da2a2ac6e67caf74b214a7f80288819565e8b7d2ac148fe5"
|
|
trivyImage = "aquasec/trivy:0.71.1@sha256:53570e6911c2361ebe7995228088cf83a6b9b73e7f3cdca44bd8f8f425e80fa7"
|
|
gitleaksImage = "ghcr.io/gitleaks/gitleaks:v8.30.1@sha256:c00b6bd0aeb3071cbcb79009cb16a60dd9e0a7c60e2be9ab65d25e6bc8abbb7f"
|
|
golangciLint = "v2.12.2" // installed via `go install`
|
|
gotestsumModule = "v1.13.0" // ditto
|
|
govulncheckPath = "latest" // tracking latest, no Renovate pin
|
|
)
|
|
|
|
// goBase returns a base Go container with go.mod/sum prefetched and
|
|
// build/module caches mounted. Every Go-flavoured method starts here.
|
|
func goBase(source *dagger.Directory) *dagger.Container {
|
|
return dag.Container().
|
|
From(golangImage).
|
|
WithEnvVariable("GOTOOLCHAIN", "auto").
|
|
WithEnvVariable("CGO_ENABLED", "0").
|
|
WithMountedCache("/go/pkg/mod", dag.CacheVolume("go-mod")).
|
|
WithMountedCache("/root/.cache/go-build", dag.CacheVolume("go-build")).
|
|
WithWorkdir("/src").
|
|
WithFile("/src/go.mod", source.File("go.mod")).
|
|
WithFile("/src/go.sum", source.File("go.sum")).
|
|
WithExec([]string{"go", "mod", "download"}).
|
|
WithDirectory("/src", source)
|
|
}
|