Guest24897
/
DockerCLI
mirror of https://github.com/docker/cli.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
DockerCLI/dockerfiles/Dockerfile.lint

19 lines
541 B
Docker
Raw Normal View History

Dockerfile: use syntax=docker/dockerfile:1 Now that HEREDOC is included in the stable Dockerfile syntax, we can use the latest stable syntax for all Dockerfiles. The recommendation for the stable syntax is to use `:1` (which is equivalent to "latest" stable syntax. Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-03-17 05:37:08 -04:00
# syntax=docker/dockerfile:1
Add gometalinter to CI Signed-off-by: Daniel Nephin <dnephin@docker.com>
2017-05-02 15:10:03 -04:00
update to go1.20.12 go1.20.12 (released 2023-12-05) includes security fixes to the go command, and the net/http and path/filepath packages, as well as bug fixes to the compiler and the go command. See the Go 1.20.12 milestone on our issue tracker for details. - https://github.com/golang/go/issues?q=milestone%3AGo1.20.12+label%3ACherryPickApproved - full diff: https://github.com/golang/go/compare/go1.20.11...go1.20.12 from the security mailing: [security] Go 1.21.5 and Go 1.20.12 are released Hello gophers, We have just released Go versions 1.21.5 and 1.20.12, minor point releases. These minor releases include 3 security fixes following the security policy: - net/http: limit chunked data overhead A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can further exploit this to cause a server to automatically read a large amount of data (up to about 1GiB) when a handler fails to read the entire body of a request. Chunk extensions are a little-used HTTP feature which permit including additional metadata in a request or response body sent using the chunked encoding. The net/http chunked encoding reader discards this metadata. A sender can exploit this by inserting a large metadata segment with each byte transferred. The chunk reader now produces an error if the ratio of real body to encoded bytes grows too small. Thanks to Bartek Nowotarski for reporting this issue. This is CVE-2023-39326 and Go issue https://go.dev/issue/64433. - cmd/go: go get may unexpectedly fallback to insecure git Using go get to fetch a module with the ".git" suffix may unexpectedly fallback to the insecure "git://" protocol if the module is unavailable via the secure "https://" and "git+ssh://" protocols, even if GOINSECURE is not set for said module. This only affects users who are not using the module proxy and are fetching modules directly (i.e. GOPROXY=off). Thanks to David Leadbeater for reporting this issue. This is CVE-2023-45285 and Go issue https://go.dev/issue/63845. - path/filepath: retain trailing \ when cleaning paths like \\?\c:\ Go 1.20.11 and Go 1.21.4 inadvertently changed the definition of the volume name in Windows paths starting with \\?\, resulting in filepath.Clean(\\?\c:\) returning \\?\c: rather than \\?\c:\ (among other effects). The previous behavior has been restored. This is an update to CVE-2023-45283 and Go issue https://go.dev/issue/64028. Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-12-05 19:41:51 -05:00
ARG GO_VERSION=1.20.12
Dockerfile: update ALPINE_VERSION to 3.17 Official Golang images are now only available for 3.18 and 3.17; 3.18 doesn't look to play well with gotestsum, so sticking to an older version. Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit acb248f8d5d0d22a5c297e8abbfc9b5d4101d9bd) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-06-14 07:30:40 -04:00
ARG ALPINE_VERSION=3.17
update golangci-lint to v1.54.2 Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit db6209abdddf2da9cc1bcdb8d2aa478cd5e6ba39) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-08-28 17:21:03 -04:00
ARG GOLANGCI_LINT_VERSION=v1.54.2
Add gometalinter to CI Signed-off-by: Daniel Nephin <dnephin@docker.com>
2017-05-02 15:10:03 -04:00
GitHub Actions for lint Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-08-05 02:44:16 -04:00
FROM golangci/golangci-lint:${GOLANGCI_LINT_VERSION}-alpine AS golangci-lint
Add gometalinter to CI Signed-off-by: Daniel Nephin <dnephin@docker.com>
2017-05-02 15:10:03 -04:00
Dockerfile: add ALPINE_VERSION build-arg This allows us to pin to a specific version of Alpine, in case the golang:alpine image switches to a newer version, which may at times be incompatible, e.g. see https://github.com/moby/moby/issues/44570 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-12-04 08:01:30 -05:00
FROM golang:${GO_VERSION}-alpine${ALPINE_VERSION} AS lint
Dockerfile: use GOTOOLCHAIN=local This may find its way into the official images, but until it does, let's make sure we don't get unexpected updates of go. Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit e9759cee6911fd5b7f799fe26876bcfbbd4969a8) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-09-26 06:43:38 -04:00
ENV GOTOOLCHAIN=local
GitHub Actions for lint Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-08-05 02:44:16 -04:00
ENV GO111MODULE=off
ENV CGO_ENABLED=0
ENV GOGC=75
Remove now obsolete gometalinter and use golangci-lint instead Signed-off-by: Silvin Lubecki <silvin.lubecki@docker.com> Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2019-04-02 11:27:12 -04:00
WORKDIR /go/src/github.com/docker/cli
Dockerfile: use COPY --link where possible Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit af05a68828ede9bf58b82082a4d74af9fac74cae) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-08-24 19:56:35 -04:00
COPY --link --from=golangci-lint /usr/bin/golangci-lint /usr/bin/golangci-lint
GitHub Actions for lint Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-08-05 02:44:16 -04:00
RUN --mount=type=bind,target=. \
--mount=type=cache,target=/root/.cache \
golangci-lint run