mirror of
https://github.com/docker/cli.git
synced 2026-11-06 13:10:41 -04:00
Paweł Gronowski
1fab379bcc
This release includes 1 security fix following the security policy: - crypto/x509: mitigation for security concerns with a specific Certificate Authority We're blocking trust in a small set of intermediate certificates due to specific security concerns around their operation. Verify will now filter out chains which contain these intermediates, preventing them from being returned to the caller. We highly recommend immediately upgrading to this release. This is CVE-2026-111943 and Go issue https://go.dev/issue/82345. release notes: https://go.dev/doc/devel/release#go1.26.10 Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
27 lines
992 B
Docker
27 lines
992 B
Docker
# syntax=docker/dockerfile:1
|
|
|
|
ARG GO_VERSION=1.26.10
|
|
|
|
# ALPINE_VERSION sets the version of the alpine base image to use, including for the golang image.
|
|
# It must be a supported tag in the docker.io/library/alpine image repository
|
|
# that's also available as alpine image variant for the Golang version used.
|
|
ARG ALPINE_VERSION=3.23
|
|
# GOLANGCI_LINT_VERSION sets the version of the golangci/golangci-lint image to use.
|
|
ARG GOLANGCI_LINT_VERSION=v2.10.1
|
|
|
|
FROM golangci/golangci-lint:${GOLANGCI_LINT_VERSION}-alpine AS golangci-lint
|
|
|
|
FROM golang:${GO_VERSION}-alpine${ALPINE_VERSION} AS lint
|
|
ENV GOTOOLCHAIN=local
|
|
ENV GO111MODULE=auto
|
|
ENV CGO_ENABLED=0
|
|
ENV GOGC=75
|
|
WORKDIR /go/src/github.com/docker/cli
|
|
COPY --link --from=golangci-lint /usr/bin/golangci-lint /usr/bin/golangci-lint
|
|
RUN --mount=type=bind,target=.,rw \
|
|
--mount=type=cache,target=/root/.cache \
|
|
rm -f go.mod go.sum && \
|
|
ln -s vendor.mod go.mod && \
|
|
ln -s vendor.sum go.sum && \
|
|
golangci-lint run
|