.github/workflows/integration.yml

@@ -15,7 +15,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Setup go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v4
         with:
           go-version: "1.19.x"
 
@@ -44,7 +44,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Setup go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v4
         with:
           go-version: "1.19.x"
 

.github/workflows/release.yml

@@ -13,7 +13,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Setup go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v4
         with:
           go-version: "1.19.x"
 

Dockerfile

@@ -1,30 +1,30 @@
-# syntax=docker/dockerfile:1
+FROM alpine:3.18.4 as builder
 
-# Build the application from source
+WORKDIR /go/src/github.com/systemli/prometheus-mastodon-exporter
-FROM golang:1.21.4 AS build-stage
 
-WORKDIR /app
+ENV USER=appuser
+ENV UID=10001
 
-COPY go.mod go.sum ./
+RUN adduser \
-RUN go mod download
+    --disabled-password \
+    --gecos "" \
+    --home "/nonexistent" \
+    --shell "/sbin/nologin" \
+    --no-create-home \
+    --uid "${UID}" \
+    "${USER}"
 
-COPY *.go ./
+RUN apk add --no-cache --update ca-certificates
 
-RUN CGO_ENABLED=0 GOOS=linux go build -o /prometheus-mastodon-exporter
+FROM scratch
 
-# Run the tests in the container
+COPY --from=builder /etc/passwd /etc/passwd
-FROM build-stage AS run-test-stage
+COPY --from=builder /etc/group /etc/group
-RUN go test -v ./...
+COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
+COPY prometheus-mastodon-exporter /prometheus-mastodon-exporter
 
-# Deploy the application binary into a lean image
+USER appuser:appuser
-FROM gcr.io/distroless/base-debian11 AS build-release-stage
-
-WORKDIR /
-
-COPY --from=build-stage /prometheus-mastodon-exporter /prometheus-mastodon-exporter
 
 EXPOSE 13120
 
-USER nonroot:nonroot
-
 ENTRYPOINT ["/prometheus-mastodon-exporter"]