sonar-scanner-cli (11.4)
Published 2025-07-30 15:13:52 +03:00 by administrator
Installation
docker pull git.anikiforov.dev/actions/sonar-scanner-cli:11.4sha256:14f46a51cbfde162e30cfd673bff542eca59860a0e904bcd2614f192605bd704Image layers
| COPY /rootfs/ / # buildkit |
| CMD ["/bin/bash"] |
| ARG version=17.0.16.8-1 |
| ARG package_version=1 |
| RUN |2 version=17.0.16.8-1 package_version=1 /bin/sh -c set -eux && rpm --import file:///etc/pki/rpm-gpg/RPM-GPG-KEY-amazon-linux-2023 && echo "localpkg_gpgcheck=1" >> /etc/dnf/dnf.conf && CORRETO_TEMP=$(mktemp -d) && pushd ${CORRETO_TEMP} && RPM_LIST=("java-17-amazon-corretto-headless-$version.amzn2023.${package_version}.$(uname -m).rpm" "java-17-amazon-corretto-$version.amzn2023.${package_version}.$(uname -m).rpm" "java-17-amazon-corretto-devel-$version.amzn2023.${package_version}.$(uname -m).rpm" "java-17-amazon-corretto-jmods-$version.amzn2023.${package_version}.$(uname -m).rpm") && for rpm in ${RPM_LIST[@]}; do curl --fail -O https://corretto.aws/downloads/resources/$(echo $version | tr '-' '.')/${rpm} && rpm -K "${CORRETO_TEMP}/${rpm}" | grep -F "${CORRETO_TEMP}/${rpm}: digests signatures OK" || exit 1; done && dnf install -y ${CORRETO_TEMP}/*.rpm && popd && rm -rf /usr/lib/jvm/java-17-amazon-corretto.$(uname -m)/lib/src.zip && rm -rf ${CORRETO_TEMP} && dnf clean all && sed -i '/localpkg_gpgcheck=1/d' /etc/dnf/dnf.conf # buildkit |
| ENV LANG=C.UTF-8 |
| ENV JAVA_HOME=/usr/lib/jvm/java-17-amazon-corretto |
| ARG SONAR_SCANNER_HOME=/opt/sonar-scanner |
| ENV HOME=/tmp XDG_CONFIG_HOME=/tmp SONAR_SCANNER_HOME=/opt/sonar-scanner SONAR_USER_HOME=/opt/sonar-scanner/.sonar PATH=/opt/sonar-scanner/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin SRC_PATH=/usr/src SCANNER_WORKDIR_PATH=/tmp/.scannerwork LANG=C.UTF-8 LC_ALL=C.UTF-8 |
| COPY /opt/sonar-scanner /opt/sonar-scanner # buildkit |
| RUN |1 SONAR_SCANNER_HOME=/opt/sonar-scanner /bin/sh -c dnf install -y git && dnf install -y tar && dnf install -y nodejs22 && alternatives --set node /usr/bin/node-22 && dnf clean all && set -eux && groupadd --system --gid 1000 scanner-cli && useradd --system --uid 1000 --gid scanner-cli scanner-cli && chown -R scanner-cli:scanner-cli "${SONAR_SCANNER_HOME}" "${SRC_PATH}" && mkdir -p "${SRC_PATH}" "${SONAR_USER_HOME}" "${SONAR_USER_HOME}/cache" "${SCANNER_WORKDIR_PATH}" && chown -R scanner-cli:scanner-cli "${SONAR_SCANNER_HOME}" "${SRC_PATH}" "${SCANNER_WORKDIR_PATH}" && chmod -R 555 "${SONAR_SCANNER_HOME}" && chmod -R 754 "${SRC_PATH}" "${SONAR_USER_HOME}" "${SCANNER_WORKDIR_PATH}" && dnf upgrade -y --releasever=latest --security # buildkit |
| COPY --chown=scanner-cli:scanner-cli bin /usr/bin/ # buildkit |
| USER scanner-cli |
| WORKDIR /usr/src |
| ENTRYPOINT ["/usr/bin/entrypoint.sh"] |
| CMD ["sonar-scanner"] |