- fork of mariomac/goblog
- tried following along to Grafana Beyla Docker Setup but was getting container error issue #6
- PR raised pull-request #7
- enhanced Dockerfile to use multi stage build pull-request #8
- added security scan and SBOM
# compile go
go build -o bin/goblog ./src
# execute binary
./goblog
# create dockerfile
# add labels to link container repo to code repo
LABEL org.opencontainers.image.source=https://github.com/adegoodyer/goblog
LABEL org.opencontainers.image.description="Simplest blog engine for coders"
LABEL org.opencontainers.image.licenses=MIT
# build dev container image (single tag)
d build -t ghcr.io/adegoodyer/goblog:dev .
# list images
d image ls
# run container locally
d run -p 8080:8080 --name goblog ghcr.io/adegoodyer/goblog:dev
# http://localhost:8080
# build prod container image (multiple tags)
d build -t ghcr.io/adegoodyer/goblog:v0.0.1 -t ghcr.io/adegoodyer/goblog:latest .
# sec scan
grype ghcr.io/adegoodyer/goblog:latest
# generate sbom
syft ghcr.io/adegoodyer/goblog:latest
# create PAT
# Profile > Settings > Developer Settings (right at bottom) > PAT
# https://github.com/settings/apps
# classic token
# write:packages
# read:packages
# delete:packages
# export pat
export GH_PAT='<pat-token>'
# authenticate to ghcr
echo $GH_PAT | docker login ghcr.io -u adegoodyer --password-stdin
# push image to ghcr
d push ghcr.io/adegoodyer/goblog --all-tagsNAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
libcrypto3 3.3.2-r0 3.3.2-r1 apk CVE-2024-9143 Medium
libssl3 3.3.2-r0 3.3.2-r1 apk CVE-2024-9143 MediumAME VERSION TYPE
alpine-baselayout 3.6.5-r0 apk
alpine-baselayout-data 3.6.5-r0 apk
alpine-keys 2.4-r1 apk
apk-tools 2.14.4-r0 apk
busybox 1.36.1-r29 apk
busybox-binsh 1.36.1-r29 apk
ca-certificates-bundle 20240705-r0 apk
github.com/alecthomas/chroma/v2 v2.2.0 go-module
github.com/caarlos0/env/v6 v6.10.1 go-module
github.com/dlclark/regexp2 v1.7.0 go-module
github.com/fsnotify/fsnotify v1.7.0 go-module
github.com/mariomac/goblog (devel) go-module
github.com/mariomac/guara v0.0.0-20221222112709-f95b15506aee go-module
github.com/yuin/goldmark v1.7.4 go-module
github.com/yuin/goldmark-highlighting/v2 v2.0.0-20230729083705-37449abec8cc go-module
golang.org/x/net v0.29.0 go-module
golang.org/x/sys v0.25.0 go-module
golang.org/x/tools v0.25.0 go-module
gopkg.in/yaml.v2 v2.4.0 go-module
libcrypto3 3.3.2-r0 apk
libssl3 3.3.2-r0 apk
musl 1.2.5-r0 apk
musl-utils 1.2.5-r0 apk
scanelf 1.3.7-r2 apk
ssl_client 1.36.1-r29 apk
stdlib go1.23.3 go-module
zlib 1.3.1-r1 apk
This project is licensed under the MIT License - see the LICENSE file for details.