mirror of
https://github.com/anchore/syft.git
synced 2025-11-17 16:33:21 +01:00
Many of these images have a slightly different sets of packages when the arm64 variant is pulled, so that leaving this digest unpinned causes the tests to fail on arm64 hosts. Pin the FROM lines to force stable platform values regardless of host architecture. Signed-off-by: Will Murphy <will.murphy@anchore.com>
8 lines
330 B
Docker
8 lines
330 B
Docker
FROM openjdk:11@sha256:e81b7f317654b0f26d3993e014b04bcb29250339b11b9de41e130feecd4cd43c
|
|
|
|
RUN wget --no-verbose https://github.com/spdx/tools-java/releases/download/v1.1.3/tools-java-1.1.3.zip && \
|
|
unzip tools-java-1.1.3.zip && \
|
|
rm tools-java-1.1.3.zip
|
|
|
|
ENTRYPOINT ["java", "-jar", "tools-java-1.1.3-jar-with-dependencies.jar"]
|