forgejo-ci (sha256:fbbce5ac44d32168f9bcc7ba5bbfe7a0ce151983c63a1c3798d218debac320e0)
Published 2026-07-25 18:33:50 +01:00 by rguimaraes
Installation
docker pull git.ruiguimaraes.net/forgejo/forgejo-ci@sha256:fbbce5ac44d32168f9bcc7ba5bbfe7a0ce151983c63a1c3798d218debac320e0sha256:fbbce5ac44d32168f9bcc7ba5bbfe7a0ce151983c63a1c3798d218debac320e0Image layers
| # debian.sh --arch 'amd64' out/ 'trixie' '@1783900800' |
| ENV DEBIAN_FRONTEND=noninteractive |
| ENV YQ_VERSION=v4.47.2 |
| RUN /bin/sh -c apt-get update && apt-get install -y --no-install-recommends bash ca-certificates curl wget git jq unzip zip rsync openssh-client gnupg && curl -fsSL https://deb.nodesource.com/setup_22.x | bash - && apt-get install -y --no-install-recommends nodejs && wget -qO /usr/local/bin/yq "https://github.com/mikefarah/yq/releases/download/${YQ_VERSION}/yq_linux_amd64" && chmod +x /usr/local/bin/yq && apt-get autoremove -y && apt-get clean && rm -rf /var/lib/apt/lists/* # buildkit |
| WORKDIR /workspace |
| SHELL [/bin/bash -c] |
| ENV DEBIAN_FRONTEND=noninteractive |
| ENV GITLEAKS_VERSION=8.28.0 |
| ENV HADOLINT_VERSION=2.12.0 |
| ENV MARKDOWNLINT_VERSION=0.45.0 |
| RUN /bin/bash -c apt-get update && apt-get install -y --no-install-recommends python3 python3-pip python3-venv pre-commit shellcheck yamllint && apt-get clean && rm -rf /var/lib/apt/lists/* # buildkit |
| RUN /bin/bash -c wget -qO- https://github.com/gitleaks/gitleaks/releases/download/v${GITLEAKS_VERSION}/gitleaks_${GITLEAKS_VERSION}_linux_x64.tar.gz | tar -xz -C /usr/local/bin gitleaks # buildkit |
| RUN /bin/bash -c wget -qO - https://aquasecurity.github.io/trivy-repo/deb/public.key | gpg --dearmor -o /usr/share/keyrings/trivy.gpg && echo "deb [signed-by=/usr/share/keyrings/trivy.gpg] https://aquasecurity.github.io/trivy-repo/deb generic main" > /etc/apt/sources.list.d/trivy.list && apt-get update && apt-get install -y --no-install-recommends trivy && apt-get clean && rm -rf /var/lib/apt/lists/* # buildkit |
| RUN /bin/bash -c npm install -g markdownlint-cli@${MARKDOWNLINT_VERSION} # buildkit |
| RUN /bin/bash -c wget -qO /usr/local/bin/hadolint https://github.com/hadolint/hadolint/releases/download/v${HADOLINT_VERSION}/hadolint-Linux-x86_64 && chmod +x /usr/local/bin/hadolint # buildkit |
| RUN /bin/bash -c curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b /usr/local/bin # buildkit |
| RUN /bin/bash -c curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin # buildkit |