Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/build-docker.yml
Original file line number Diff line number Diff line change
Expand Up @@ -47,7 +47,7 @@ jobs:
USER_ID=${{ github.event.inputs.userid }}
push: true
tags: |
away168/deployment-agent:${{ github.event.inputs.sourcetag }}-${{github.event.inputs.userid}}
away168/deployment-agent:${{ github.event.inputs.sourcetag }}-${{github.event.inputs.userid}}-no-wiz
cache-from: type=registry,ref=away168/deployment-agent:${{ github.event.inputs.sourcetag }}-${{github.event.inputs.userid}}
cache-to: type=inline
# Add this line to output the built image tag
Expand Down
22 changes: 0 additions & 22 deletions env0/custom-image/spectral-image/Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -38,28 +38,6 @@ RUN apk add --no-cache \

ENV PATH="/opt/global_python_venv/bin:${PATH}"

# Define the version/tag for Wiz CLI
ARG WIZCLI_VERSION=0.46.0
ARG WIZCLI_ARCH=amd64

# Install dependencies for GPG, SHA256 verification, and potentially wizcli's runtime
# (libc-utils provides 'ldd' and sometimes helps with musl-libc compatibility for glibc binaries)
RUN apk add --no-cache gnupg coreutils libc-utils

# Install Wiz CLI with verification steps (optimized for Docker best practices)
# All steps are chained with '&&' in a single RUN command to reduce image layers.
RUN curl -sL -o /tmp/wizcli https://downloads.wiz.io/wizcli/${WIZCLI_VERSION}/wizcli-linux-${WIZCLI_ARCH} && \
curl -sL -o /tmp/public_key.asc https://downloads.wiz.io/wizcli/public_key.asc && \
curl -sL -o /tmp/wizcli-sha256 https://downloads.wiz.io/wizcli/${WIZCLI_VERSION}/wizcli-linux-${WIZCLI_ARCH}-sha256 && \
curl -sL -o /tmp/wizcli-sha256.sig https://downloads.wiz.io/wizcli/${WIZCLI_VERSION}/wizcli-linux-${WIZCLI_ARCH}-sha256.sig && \
gpg --import /tmp/public_key.asc && \
gpg --verify /tmp/wizcli-sha256.sig /tmp/wizcli-sha256 && \
echo "$(cat /tmp/wizcli-sha256) /tmp/wizcli" | sha256sum --check && \
mv /tmp/wizcli /usr/local/bin/wizcli && \
chmod +x /usr/local/bin/wizcli && \
rm -f /tmp/public_key.asc /tmp/wizcli-sha256 /tmp/wizcli-sha256.sig && \
wizcli version

ARG AZ_CLI_VERSION=2.67.0
# Install Azure cli
RUN apk add --virtual=build gcc make openssl-dev libffi-dev musl-dev linux-headers \
Expand Down