Guest24897
/
DockerCLI
mirror of https://github.com/docker/cli.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
DockerCLI/dockerfiles/Dockerfile.lint

19 lines
541 B
Docker
Raw Normal View History

Dockerfile: use syntax=docker/dockerfile:1 Now that HEREDOC is included in the stable Dockerfile syntax, we can use the latest stable syntax for all Dockerfiles. The recommendation for the stable syntax is to use `:1` (which is equivalent to "latest" stable syntax. Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-03-17 05:37:08 -04:00
# syntax=docker/dockerfile:1
Add gometalinter to CI Signed-off-by: Daniel Nephin <dnephin@docker.com>
2017-05-02 15:10:03 -04:00
update to go1.20.10 go1.20.10 (released 2023-10-10) includes a security fix to the net/http package. See the Go 1.20.10 milestone on our issue tracker for details: https://github.com/golang/go/issues?q=milestone%3AGo1.20.10+label%3ACherryPickApproved full diff: https://github.com/golang/go/compare/go1.20.9...go1.20.10 From the security mailing: [security] Go 1.21.3 and Go 1.20.10 are released Hello gophers, We have just released Go versions 1.21.3 and 1.20.10, minor point releases. These minor releases include 1 security fixes following the security policy: - net/http: rapid stream resets can cause excessive work A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded to the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit. New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection. This issue is also fixed in golang.org/x/net/http2 v0.17.0, for users manually configuring HTTP/2. The default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function. This is CVE-2023-39325 and Go issue https://go.dev/issue/63417. This is also tracked by CVE-2023-44487. Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-10-11 14:04:46 -04:00
ARG GO_VERSION=1.20.10
Dockerfile: update ALPINE_VERSION to 3.17 Official Golang images are now only available for 3.18 and 3.17; 3.18 doesn't look to play well with gotestsum, so sticking to an older version. Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit acb248f8d5d0d22a5c297e8abbfc9b5d4101d9bd) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-06-14 07:30:40 -04:00
ARG ALPINE_VERSION=3.17
update golangci-lint to v1.54.2 Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit db6209abdddf2da9cc1bcdb8d2aa478cd5e6ba39) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-08-28 17:21:03 -04:00
ARG GOLANGCI_LINT_VERSION=v1.54.2
Add gometalinter to CI Signed-off-by: Daniel Nephin <dnephin@docker.com>
2017-05-02 15:10:03 -04:00
GitHub Actions for lint Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-08-05 02:44:16 -04:00
FROM golangci/golangci-lint:${GOLANGCI_LINT_VERSION}-alpine AS golangci-lint
Add gometalinter to CI Signed-off-by: Daniel Nephin <dnephin@docker.com>
2017-05-02 15:10:03 -04:00
Dockerfile: add ALPINE_VERSION build-arg This allows us to pin to a specific version of Alpine, in case the golang:alpine image switches to a newer version, which may at times be incompatible, e.g. see https://github.com/moby/moby/issues/44570 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2022-12-04 08:01:30 -05:00
FROM golang:${GO_VERSION}-alpine${ALPINE_VERSION} AS lint
Dockerfile: use GOTOOLCHAIN=local This may find its way into the official images, but until it does, let's make sure we don't get unexpected updates of go. Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit e9759cee6911fd5b7f799fe26876bcfbbd4969a8) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-09-26 06:43:38 -04:00
ENV GOTOOLCHAIN=local
GitHub Actions for lint Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-08-05 02:44:16 -04:00
ENV GO111MODULE=off
ENV CGO_ENABLED=0
ENV GOGC=75
Remove now obsolete gometalinter and use golangci-lint instead Signed-off-by: Silvin Lubecki <silvin.lubecki@docker.com> Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2019-04-02 11:27:12 -04:00
WORKDIR /go/src/github.com/docker/cli
Dockerfile: use COPY --link where possible Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit af05a68828ede9bf58b82082a4d74af9fac74cae) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-08-24 19:56:35 -04:00
COPY --link --from=golangci-lint /usr/bin/golangci-lint /usr/bin/golangci-lint
GitHub Actions for lint Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
2021-08-05 02:44:16 -04:00
RUN --mount=type=bind,target=. \
--mount=type=cache,target=/root/.cache \
golangci-lint run