mirror of
https://github.com/harness-community/drone-email.git
synced 2026-07-16 16:11:00 +08:00
vuln-remediation-agent
b984f31505
Bump Go builder to 1.25-alpine3.22, runtime base to alpine:3.22, and upgrade golang.org/x/crypto to v0.52.0, golang.org/x/net to v0.55.0, and Masterminds/goutils to v1.1.1. Resolves all 64 Trivy findings on plugins/email:4.0.2 (2 Critical / 40 High / 20 Medium / 2 Low → 0/0/0/0) without introducing any new CVEs. OnDemand baseline scan: Success (Connector=harnesssecure) OnDemand after-scan: Failed -- scheduler error (harnessdev/PROJECT) on docker.io connector path; needs manual re-run to confirm Prisma Cloud delta.
14 lines
285 B
Docker
14 lines
285 B
Docker
FROM golang:1.25-alpine3.22 as builder
|
|
|
|
WORKDIR /go/src/drone-email
|
|
COPY . .
|
|
|
|
RUN GOOS=linux GOARCH=arm64 CGO_ENABLED=0 go build
|
|
|
|
FROM alpine:3.22
|
|
|
|
RUN apk add --no-cache ca-certificates tzdata
|
|
|
|
COPY --from=builder /go/src/drone-email/drone-email /bin/
|
|
ENTRYPOINT ["/bin/drone-email"]
|