Merge pull request #33 from step-security/release

use official alpine image for docker build
step-security · Nov 19, 2024 · e32a088 · e32a088
2 parents 29c73fc + 762356b
commit e32a088
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 3 deletions.
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -2,13 +2,15 @@ name: test
 
 on:
   push:
-    branch:
+    branches:
     - 'main'
     - 'helm-*'
 
 jobs:
   release:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1

diff --git a/Dockerfile b/Dockerfile
@@ -1,6 +1,6 @@
-FROM stefanprodan/alpine-base:latest@sha256:be230171b01adc5e166899785e9419d90d1359d53a690bf72b8d34c05a1e3f6a
+FROM alpine:3.12.1
 
-RUN apk --no-cache add git
+RUN apk add --no-cache ca-certificates curl bash tar jq git
 
 COPY src/entrypoint.sh /entrypoint.sh
 RUN chmod +x /entrypoint.sh