admin777/new-api
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
new-api/Dockerfile

39 lines
1.1 KiB
Docker
Raw Normal View History

security: harden Docker and release CI workflows - Pin all GitHub Actions to commit SHA to prevent supply chain attacks - Enable SLSA provenance attestation (mode=max) and SBOM generation - Add cosign keyless signing for Docker images via GitHub OIDC - Capture and output image digests to GitHub Job Summary - Pin Dockerfile base images to digest (bun:1, golang:1.26.1-alpine, debian:bookworm-slim) - Add SHA256 checksum generation for binary releases (Linux/macOS/Windows) - Update actions/checkout v3->v4, actions/setup-go v3->v5 in release.yml
2026-03-24 23:53:50 +08:00
FROM oven/bun:1@sha256:0733e50325078969732ebe3b15ce4c4be5082f18c4ac1a0f0ca4839c2e4e42a7 AS builder
Initial commit
2023-04-22 20:39:27 +08:00
WORKDIR /build
ci: add stage caching to Dockerfile (#408)
2023-08-13 22:55:43 +08:00
COPY web/package.json .
🔄 update: add bun.lock file copy to Dockerfile for dependency management - Included the `bun.lock` file in the Dockerfile to ensure consistent dependency installation during the build process.
2025-07-13 14:05:45 +08:00
COPY web/bun.lock .
Update Dockerfile to use Bun for package management and build process - Changed base image from Node.js to Bun for improved performance. - Replaced npm install with bun install for dependency management. - Updated build command to use Bun for building the application. - Added new bun.lockb file to track Bun dependencies.
2025-01-06 16:37:21 +08:00
RUN bun install
Initial commit
2023-04-22 20:39:27 +08:00
COPY ./web .
COPY ./VERSION .
Update Dockerfile to use Bun for package management and build process - Changed base image from Node.js to Bun for improved performance. - Replaced npm install with bun install for dependency management. - Updated build command to use Bun for building the application. - Added new bun.lockb file to track Bun dependencies.
2025-01-06 16:37:21 +08:00
RUN DISABLE_ESLINT_PLUGIN='true' VITE_REACT_APP_VERSION=$(cat VERSION) bun run build
Initial commit
2023-04-22 20:39:27 +08:00
security: harden Docker and release CI workflows - Pin all GitHub Actions to commit SHA to prevent supply chain attacks - Enable SLSA provenance attestation (mode=max) and SBOM generation - Add cosign keyless signing for Docker images via GitHub OIDC - Capture and output image digests to GitHub Job Summary - Pin Dockerfile base images to digest (bun:1, golang:1.26.1-alpine, debian:bookworm-slim) - Add SHA256 checksum generation for binary releases (Linux/macOS/Windows) - Update actions/checkout v3->v4, actions/setup-go v3->v5 in release.yml
2026-03-24 23:53:50 +08:00
FROM golang:1.26.1-alpine@sha256:2389ebfa5b7f43eeafbd6be0c3700cc46690ef842ad962f6c5bd6be49ed82039 AS builder2
Alpha CI (#2011)
2025-10-11 13:24:04 +08:00
ENV GO111MODULE=on CGO_ENABLED=0
ARG TARGETOS
ARG TARGETARCH
ENV GOOS=${TARGETOS:-linux} GOARCH=${TARGETARCH:-amd64}
chore(go): enable greenteagc
2025-12-02 23:15:20 +08:00
ENV GOEXPERIMENT=greenteagc
Initial commit
2023-04-22 20:39:27 +08:00
WORKDIR /build
refactor: Optimize Dockerfile for Go build process - Use alpine-based Golang image for smaller build size - Simplify Go build command by removing static linking flag - Improve Docker multi-stage build configuration
2025-02-12 17:18:23 +08:00
ci: add stage caching to Dockerfile (#408)
2023-08-13 22:55:43 +08:00
ADD go.mod go.sum ./
RUN go mod download
refactor: Optimize Dockerfile for Go build process - Use alpine-based Golang image for smaller build size - Simplify Go build command by removing static linking flag - Improve Docker multi-stage build configuration
2025-02-12 17:18:23 +08:00
Initial commit
2023-04-22 20:39:27 +08:00
COPY . .
fix: ci
2024-03-23 21:47:51 +08:00
COPY --from=builder /build/dist ./web/dist
fix: version
2025-10-12 13:05:13 +08:00
RUN go build -ldflags "-s -w -X 'github.com/QuantumNous/new-api/common.Version=$(cat VERSION)'" -o new-api
Initial commit
2023-04-22 20:39:27 +08:00
security: harden Docker and release CI workflows - Pin all GitHub Actions to commit SHA to prevent supply chain attacks - Enable SLSA provenance attestation (mode=max) and SBOM generation - Add cosign keyless signing for Docker images via GitHub OIDC - Capture and output image digests to GitHub Job Summary - Pin Dockerfile base images to digest (bun:1, golang:1.26.1-alpine, debian:bookworm-slim) - Add SHA256 checksum generation for binary releases (Linux/macOS/Windows) - Update actions/checkout v3->v4, actions/setup-go v3->v5 in release.yml
2026-03-24 23:53:50 +08:00
FROM debian:bookworm-slim@sha256:f06537653ac770703bc45b4b113475bd402f451e85223f0f2837acbf89ab020a
Initial commit
2023-04-22 20:39:27 +08:00
chore(go): enable greenteagc
2025-12-02 23:15:20 +08:00
RUN apt-get update \
fix: health check
2025-12-12 20:37:32 +08:00
&& apt-get install -y --no-install-recommends ca-certificates tzdata libasan8 wget \
chore(go): enable greenteagc
2025-12-02 23:15:20 +08:00
&& rm -rf /var/lib/apt/lists/* \
fix: display docker build error
2025-01-25 12:58:08 +07:00
&& update-ca-certificates
chore: update Dockerfile
2023-04-26 13:04:01 +08:00
format: package name -> github.com/QuantumNous/new-api (#2017)
2025-10-11 15:30:09 +08:00
COPY --from=builder2 /build/new-api /
Initial commit
2023-04-22 20:39:27 +08:00
EXPOSE 3000
WORKDIR /data
format: package name -> github.com/QuantumNous/new-api (#2017)
2025-10-11 15:30:09 +08:00
ENTRYPOINT ["/new-api"]
Reference in New Issue Copy Permalink