52 lines
2.1 KiB
Makefile
52 lines
2.1 KiB
Makefile
# GOSEC_VERSION
|
|
# Only required to install a specifiy version
|
|
GOSEC_VERSION?=v2.13.1 # renovate: datasource=github-releases depName=securego/gosec
|
|
|
|
# CONTAINER_RUNTIME
|
|
# The CONTAINER_RUNTIME variable will be used to specified the path to a
|
|
# container runtime. This is needed to start and run a container image.
|
|
CONTAINER_RUNTIME?=$(shell which podman)
|
|
|
|
# GOSEC_IMAGE_REGISTRY_NAME
|
|
# Defines the name of the new container to be built using several variables.
|
|
GOSEC_IMAGE_REGISTRY_NAME:=docker.io
|
|
GOSEC_IMAGE_REGISTRY_USER:=volkerraschek
|
|
|
|
GOSEC_IMAGE_NAMESPACE?=${GOSEC_IMAGE_REGISTRY_USER}
|
|
GOSEC_IMAGE_NAME:=gosec
|
|
GOSEC_IMAGE_VERSION?=latest
|
|
GOSEC_IMAGE_FULLY_QUALIFIED=${GOSEC_IMAGE_REGISTRY_NAME}/${GOSEC_IMAGE_NAMESPACE}/${GOSEC_IMAGE_NAME}:${GOSEC_IMAGE_VERSION}
|
|
GOSEC_IMAGE_UNQUALIFIED=${GOSEC_IMAGE_NAMESPACE}/${GOSEC_IMAGE_NAME}:${GOSEC_IMAGE_VERSION}
|
|
|
|
# BUILD CONTAINER IMAGE
|
|
# ==============================================================================
|
|
PHONY:=container-image/build
|
|
container-image/build:
|
|
${CONTAINER_RUNTIME} build \
|
|
--build-arg GOSEC_VERSION=${GOSEC_VERSION} \
|
|
--file Dockerfile \
|
|
--no-cache \
|
|
--pull \
|
|
--tag ${GOSEC_IMAGE_FULLY_QUALIFIED} \
|
|
--tag ${GOSEC_IMAGE_UNQUALIFIED} \
|
|
.
|
|
|
|
# DELETE CONTAINER IMAGE
|
|
# ==============================================================================
|
|
PHONY:=container-image/delete
|
|
container-image/delete:
|
|
- ${CONTAINER_RUNTIME} image rm ${GOSEC_IMAGE_FULLY_QUALIFIED} ${GOSEC_IMAGE_UNQUALIFIED}
|
|
- ${CONTAINER_RUNTIME} image rm ${BASE_IMAGE_FULL}
|
|
|
|
# PUSH CONTAINER IMAGE
|
|
# ==============================================================================
|
|
PHONY+=container-image/push
|
|
container-image/push:
|
|
echo ${GOSEC_IMAGE_REGISTRY_PASSWORD} | ${CONTAINER_RUNTIME} login ${GOSEC_IMAGE_REGISTRY_NAME} --username ${GOSEC_IMAGE_REGISTRY_USER} --password-stdin
|
|
${CONTAINER_RUNTIME} push ${GOSEC_IMAGE_FULLY_QUALIFIED}
|
|
|
|
# PHONY
|
|
# ==============================================================================
|
|
# Declare the contents of the PHONY variable as phony. We keep that information
|
|
# in a variable so we can use it in if_changed.
|
|
.PHONY: ${PHONY} |