chore(deps): update dependency anchore/syft to v1.45.1

.gitea/workflows/markdown-linters.yaml

@@ -14,6 +14,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v6.0.3
-    - uses: DavidAnson/markdownlint-cli2-action@ded1f9488f68a970bc66ea5619e13e9b52e601cd # v23.2.0
+    - uses: DavidAnson/markdownlint-cli2-action@v21.0.0
       with:
         globs: '**/*.md'

.gitea/workflows/release.yaml

@@ -33,7 +33,7 @@ jobs:
         rm syft_${SYFT_VERSION}_${OS}_${ARCH}.deb
     - uses: volker-raschek/cosign-installer@v4.1.2-rc3
       with:
-        cosign-release: "v3.1.0" # renovate: datasource=github-tags depName=sigstore/cosign
+        cosign-release: "v3.0.6" # renovate: datasource=github-tags depName=sigstore/cosign
     - uses: docker/setup-qemu-action@v4.1.0
       with:
         image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest

Makefile

@@ -6,6 +6,21 @@ VERSION?=$(shell git describe --abbrev=0)+hash.$(shell git rev-parse --short HEA
 DESTDIR?=
 PREFIX?=/usr/local
 
+# CONTAINER_RUNTIME
+# The CONTAINER_RUNTIME variable will be used to specified the path to a
+# container runtime. This is needed to start and run a container image.
+CONTAINER_RUNTIME?=$(shell which podman)
+
+# DB_WAIT_IMAGE_REGISTRY_NAME
+# Defines the name of the new container to be built using several variables.
+DB_WAIT_IMAGE_REGISTRY_NAME:=git.cryptic.systems
+DB_WAIT_IMAGE_REGISTRY_USER:=volker.raschek
+
+DB_WAIT_IMAGE_NAMESPACE?=${DB_WAIT_IMAGE_REGISTRY_USER}
+DB_WAIT_IMAGE_NAME:=${EXECUTABLE}
+DB_WAIT_IMAGE_VERSION?=latest
+DB_WAIT_IMAGE_FULLY_QUALIFIED=${DB_WAIT_IMAGE_REGISTRY_NAME}/${DB_WAIT_IMAGE_NAMESPACE}/${DB_WAIT_IMAGE_NAME}:${DB_WAIT_IMAGE_VERSION}
+
 # BIN
 # ==============================================================================
 db-wait:
@@ -67,6 +82,31 @@ uninstall:
 		${DESTDIR}${PREFIX}/bin/${EXECUTABLE} \
 		${DESTDIR}${PREFIX}/share/licenses/${EXECUTABLE}
 
+# BUILD CONTAINER IMAGE
+# ==============================================================================
+PHONY+=container-image/build
+container-image/build:
+	${CONTAINER_RUNTIME} build \
+		--build-arg VERSION=${VERSION} \
+		--file Dockerfile \
+		--no-cache \
+		--pull \
+		--tag ${DB_WAIT_IMAGE_FULLY_QUALIFIED} \
+		.
+
+# DELETE CONTAINER IMAGE
+# ==============================================================================
+PHONY:=container-image/delete
+container-image/delete:
+	- ${CONTAINER_RUNTIME} image rm ${DB_WAIT_IMAGE_FULLY_QUALIFIED}
+
+# PUSH CONTAINER IMAGE
+# ==============================================================================
+PHONY+=container-image/push
+container-image/push:
+	echo ${DB_WAIT_IMAGE_REGISTRY_PASSWORD} | ${CONTAINER_RUNTIME} login ${DB_WAIT_IMAGE_REGISTRY_NAME} --username ${DB_WAIT_IMAGE_REGISTRY_USER} --password-stdin
+	${CONTAINER_RUNTIME} push ${DB_WAIT_IMAGE_FULLY_QUALIFIED}
+
 # PHONY
 # ==============================================================================
 # Declare the contents of the PHONY variable as phony.  We keep that information