informed-decision/deploy/zlib-overlay/Containerfile
tegwick 9b4bb25d32
All checks were successful
Publish exact zlib-only remediation candidate / publish-candidate (push) Successful in 13s
Prepare independently reviewed zlib-only image candidate
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
2026-10-11 11:36:02 +02:00

17 lines
1.3 KiB
Docker

FROM forgejo.coulomb.social/coulomb/informed-decision@sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a
ARG SOURCE_REVISION=uncommitted-T05-local-preparation
ARG SOURCE_CONTEXT_SHA256
USER 0:0
COPY zlib-1.3.2-r1.apk APKINDEX.tar.gz /tmp/infd-zlib/x86_64/
RUN echo '63aeea03c15a2f9018f81805cfc8aa926bdf5cd68921f22149c2fbb5d0ee9f47 /tmp/infd-zlib/x86_64/zlib-1.3.2-r1.apk' | sha256sum -c - \
&& echo '24fc2ccb08f3125429a38b31bd6c76a7b394c6236df0975760dc8259e50dfbd5 /tmp/infd-zlib/x86_64/APKINDEX.tar.gz' | sha256sum -c - \
&& apk verify /tmp/infd-zlib/x86_64/zlib-1.3.2-r1.apk /tmp/infd-zlib/x86_64/APKINDEX.tar.gz \
&& apk upgrade --no-logfile --no-network --no-cache --no-preupgrade --repositories-file /dev/null --repository /tmp/infd-zlib zlib \
&& apk info --exists 'zlib=1.3.2-r1' \
&& rm -rf /tmp/infd-zlib
USER 10001:10001
LABEL org.opencontainers.image.revision="$SOURCE_REVISION" \
org.opencontainers.image.base.digest="sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a" \
social.coulomb.source.context.sha256="$SOURCE_CONTEXT_SHA256" \
social.coulomb.source.policy.sha256="9d7c1be4cb6199d14ef0aaead5f85951f45b0ccbd7c800a7fde922a253566b62" \
social.coulomb.release.scope="INFD-WP-0009-T05/zlib-85091-r1"