tricks/Dockerfile

FROM docker:dind
MAINTAINER Elia El Lazkani <git@lazkani.io>

ARG ORAS_VERSION="1.0.0"
ENV DOCKER_HOST=unix:///var/run/docker.sock

RUN apk add --virtual .build-deps curl && \
    export TRIVY_VERSION=$(wget -qO - "https://api.github.com/repos/aquasecurity/trivy/releases/latest" | grep '"tag_name":' | sed -E 's/.*"v([^"]+)".*/\1/') && \
    echo $TRIVY_VERSION && \
    curl -LO "https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/trivy_${TRIVY_VERSION}_Linux-64bit.tar.gz" && \
    mkdir -p trivy-install && \
    tar -zxf trivy_${TRIVY_VERSION}_*.tar.gz -C trivy-install/ && \
    mv trivy-install /opt/trivy && \
    ln -s /opt/trivy/trivy /usr/local/bin/trivy && \
    apk del .build-deps

ENTRYPOINT ["/usr/local/bin/dockerd-entrypoint.sh", "/bin/trivy"]