mirror of
https://github.com/fleetdm/fleet
synced 2026-04-24 06:57:21 +00:00
5646062c85
Fixes CVE-2025-22874 reported by https://github.com/fleetdm/fleet/actions/runs/15601368321/job/43941793647. (IMO not a critical CVE, so it doesn't need to be cherry-picked into v4.69.0.) Added automation to make this easier next time.
18 lines
770 B
Docker
18 lines
770 B
Docker
FROM golang:1.24.4-alpine3.21@sha256:56a23791af0f77c87b049230ead03bd8c3ad41683415ea4595e84ce7eada121a
|
|
ARG TAG
|
|
RUN apk add git
|
|
RUN git clone -b $TAG --depth=1 --no-tags --progress --no-recurse-submodules https://github.com/fleetdm/fleet.git && cd /go/fleet/cmd/osquery-perf/ && go build .
|
|
|
|
FROM alpine:3.21.3@sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c
|
|
LABEL maintainer="Fleet Developers"
|
|
|
|
# Create FleetDM group and user
|
|
RUN addgroup -S osquery-perf && adduser -S osquery-perf -G osquery-perf
|
|
|
|
COPY --from=0 /go/fleet/cmd/osquery-perf/osquery-perf /go/osquery-perf
|
|
COPY --from=0 /go/fleet/server/vulnerabilities/testdata/ /go/fleet/server/vulnerabilities/testdata/
|
|
RUN set -eux; \
|
|
apk update; \
|
|
apk upgrade
|
|
|
|
USER osquery-perf
|