forgejo-runner (ci-13.2.4)
Published 2026-10-18 22:30:57 +01:00 by capyadmin
Installation
docker pull git.capybara.network/capyadmin/forgejo-runner:ci-13.2.4sha256:4b238a04717c3b430c2c6b19bcc919449faf3444b85d4967816fc47e35bc0696Image layers
| # debian.sh --arch 'amd64' out/ 'bookworm' '@1791158400' |
| RUN /bin/sh -c set -eux; apt-get update; apt-get install -y --no-install-recommends ca-certificates curl gnupg netbase sq wget ; rm -rf /var/lib/apt/lists/* # buildkit |
| RUN /bin/sh -c set -eux; apt-get update; apt-get install -y --no-install-recommends git mercurial openssh-client subversion procps ; rm -rf /var/lib/apt/lists/* # buildkit |
| RUN /bin/sh -c set -eux; apt-get update; apt-get install -y --no-install-recommends g++ gcc libc6-dev make pkg-config ; dpkgArch="$(dpkg --print-architecture)"; if [ "$dpkgArch" = 'arm64' ]; then apt-get install -y --no-install-recommends binutils-gold; fi; rm -rf /var/lib/apt/lists/* # buildkit |
| ENV GOLANG_VERSION=1.26.9 |
| ENV GOTOOLCHAIN=local |
| ENV GOPATH=/go |
| ENV PATH=/go/bin:/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin |
| COPY /target/ / # buildkit |
| RUN /bin/sh -c mkdir -p "$GOPATH/src" "$GOPATH/bin" && chmod -R 1777 "$GOPATH" # buildkit |
| WORKDIR /go |
| ARG RUNNER_VERSION=13.2.0 |
| ARG KO_VERSION=0.18.0 |
| ARG CRANE_VERSION=0.22.1 |
| ARG NODE_MAJOR=22 |
| ARG PNPM_VERSION=9.12.3 |
| ARG SEMGREP_VERSION=1.90.0 |
| ARG GITLEAKS_VERSION=8.21.2 |
| ARG TOFU_VERSION=1.11.5 |
| ARG ACTIONLINT_VERSION=1.7.12 |
| ARG HADOLINT_VERSION=2.15.1 |
| ARG TFLINT_VERSION=0.64.0 |
| ARG OSV_SCANNER_VERSION=2.7.0 |
| ARG RUFF_VERSION=0.17.1 |
| ARG YAMLLINT_VERSION=1.38.0 |
| RUN |14 RUNNER_VERSION=13.2.0 KO_VERSION=0.18.0 CRANE_VERSION=0.22.1 NODE_MAJOR=22 PNPM_VERSION=9.12.3 SEMGREP_VERSION=1.90.0 GITLEAKS_VERSION=8.21.2 TOFU_VERSION=1.11.5 ACTIONLINT_VERSION=1.7.12 HADOLINT_VERSION=2.15.1 TFLINT_VERSION=0.64.0 OSV_SCANNER_VERSION=2.7.0 RUFF_VERSION=0.17.1 YAMLLINT_VERSION=1.38.0 /bin/sh -c apt-get update && apt-get install -y --no-install-recommends git ca-certificates curl gnupg xz-utils unzip shellcheck python3 python3-pip python3-venv && rm -rf /var/lib/apt/lists/* # buildkit |
| RUN |14 RUNNER_VERSION=13.2.0 KO_VERSION=0.18.0 CRANE_VERSION=0.22.1 NODE_MAJOR=22 PNPM_VERSION=9.12.3 SEMGREP_VERSION=1.90.0 GITLEAKS_VERSION=8.21.2 TOFU_VERSION=1.11.5 ACTIONLINT_VERSION=1.7.12 HADOLINT_VERSION=2.15.1 TFLINT_VERSION=0.64.0 OSV_SCANNER_VERSION=2.7.0 RUFF_VERSION=0.17.1 YAMLLINT_VERSION=1.38.0 /bin/sh -c curl -fsSL "https://deb.nodesource.com/setup_${NODE_MAJOR}.x" | bash - && apt-get install -y --no-install-recommends nodejs && rm -rf /var/lib/apt/lists/* && node --version && npm --version # buildkit |
| RUN |14 RUNNER_VERSION=13.2.0 KO_VERSION=0.18.0 CRANE_VERSION=0.22.1 NODE_MAJOR=22 PNPM_VERSION=9.12.3 SEMGREP_VERSION=1.90.0 GITLEAKS_VERSION=8.21.2 TOFU_VERSION=1.11.5 ACTIONLINT_VERSION=1.7.12 HADOLINT_VERSION=2.15.1 TFLINT_VERSION=0.64.0 OSV_SCANNER_VERSION=2.7.0 RUFF_VERSION=0.17.1 YAMLLINT_VERSION=1.38.0 /bin/sh -c corepack enable && corepack prepare "pnpm@${PNPM_VERSION}" --activate && pnpm --version # buildkit |
| RUN |14 RUNNER_VERSION=13.2.0 KO_VERSION=0.18.0 CRANE_VERSION=0.22.1 NODE_MAJOR=22 PNPM_VERSION=9.12.3 SEMGREP_VERSION=1.90.0 GITLEAKS_VERSION=8.21.2 TOFU_VERSION=1.11.5 ACTIONLINT_VERSION=1.7.12 HADOLINT_VERSION=2.15.1 TFLINT_VERSION=0.64.0 OSV_SCANNER_VERSION=2.7.0 RUFF_VERSION=0.17.1 YAMLLINT_VERSION=1.38.0 /bin/sh -c pip3 install --no-cache-dir --break-system-packages "semgrep==${SEMGREP_VERSION}" && semgrep --version # buildkit |
| RUN |14 RUNNER_VERSION=13.2.0 KO_VERSION=0.18.0 CRANE_VERSION=0.22.1 NODE_MAJOR=22 PNPM_VERSION=9.12.3 SEMGREP_VERSION=1.90.0 GITLEAKS_VERSION=8.21.2 TOFU_VERSION=1.11.5 ACTIONLINT_VERSION=1.7.12 HADOLINT_VERSION=2.15.1 TFLINT_VERSION=0.64.0 OSV_SCANNER_VERSION=2.7.0 RUFF_VERSION=0.17.1 YAMLLINT_VERSION=1.38.0 /bin/sh -c curl -fsSL "https://github.com/gitleaks/gitleaks/releases/download/v${GITLEAKS_VERSION}/gitleaks_${GITLEAKS_VERSION}_linux_x64.tar.gz" | tar -xz -C /usr/local/bin gitleaks && chmod 0755 /usr/local/bin/gitleaks && gitleaks version # buildkit |
| RUN |14 RUNNER_VERSION=13.2.0 KO_VERSION=0.18.0 CRANE_VERSION=0.22.1 NODE_MAJOR=22 PNPM_VERSION=9.12.3 SEMGREP_VERSION=1.90.0 GITLEAKS_VERSION=8.21.2 TOFU_VERSION=1.11.5 ACTIONLINT_VERSION=1.7.12 HADOLINT_VERSION=2.15.1 TFLINT_VERSION=0.64.0 OSV_SCANNER_VERSION=2.7.0 RUFF_VERSION=0.17.1 YAMLLINT_VERSION=1.38.0 /bin/sh -c pip3 install --no-cache-dir --break-system-packages "ruff==${RUFF_VERSION}" "yamllint==${YAMLLINT_VERSION}" && ruff --version && yamllint --version && shellcheck --version | head -2 # buildkit |
| RUN |14 RUNNER_VERSION=13.2.0 KO_VERSION=0.18.0 CRANE_VERSION=0.22.1 NODE_MAJOR=22 PNPM_VERSION=9.12.3 SEMGREP_VERSION=1.90.0 GITLEAKS_VERSION=8.21.2 TOFU_VERSION=1.11.5 ACTIONLINT_VERSION=1.7.12 HADOLINT_VERSION=2.15.1 TFLINT_VERSION=0.64.0 OSV_SCANNER_VERSION=2.7.0 RUFF_VERSION=0.17.1 YAMLLINT_VERSION=1.38.0 /bin/sh -c set -eu; cd /tmp && base=https://github.com/rhysd/actionlint/releases/download/v${ACTIONLINT_VERSION} && curl -fsSLO "$base/actionlint_${ACTIONLINT_VERSION}_linux_amd64.tar.gz" && curl -fsSLO "$base/actionlint_${ACTIONLINT_VERSION}_checksums.txt" && grep " actionlint_${ACTIONLINT_VERSION}_linux_amd64.tar.gz\$" "actionlint_${ACTIONLINT_VERSION}_checksums.txt" | sha256sum -c - && tar -xzf "actionlint_${ACTIONLINT_VERSION}_linux_amd64.tar.gz" -C /usr/local/bin actionlint && base=https://github.com/hadolint/hadolint/releases/download/v${HADOLINT_VERSION} && curl -fsSLO "$base/hadolint-linux-x86_64" && curl -fsSLO "$base/checksums.sha256" && grep "[ *]hadolint-linux-x86_64\$" checksums.sha256 | sha256sum -c - && install -m 0755 hadolint-linux-x86_64 /usr/local/bin/hadolint && base=https://github.com/terraform-linters/tflint/releases/download/v${TFLINT_VERSION} && curl -fsSLO "$base/tflint_linux_amd64.zip" && curl -fsSL -o tflint_checksums.txt "$base/checksums.txt" && grep " tflint_linux_amd64.zip\$" tflint_checksums.txt | sha256sum -c - && unzip -q tflint_linux_amd64.zip -d /usr/local/bin && base=https://github.com/google/osv-scanner/releases/download/v${OSV_SCANNER_VERSION} && curl -fsSLO "$base/osv-scanner_linux_amd64" && curl -fsSLO "$base/osv-scanner_SHA256SUMS" && grep " osv-scanner_linux_amd64\$" osv-scanner_SHA256SUMS | sha256sum -c - && install -m 0755 osv-scanner_linux_amd64 /usr/local/bin/osv-scanner && rm -rf /tmp/* && actionlint -version | head -1 && hadolint --version && tflint --version | head -1 && osv-scanner --version | head -1 # buildkit |
| RUN |14 RUNNER_VERSION=13.2.0 KO_VERSION=0.18.0 CRANE_VERSION=0.22.1 NODE_MAJOR=22 PNPM_VERSION=9.12.3 SEMGREP_VERSION=1.90.0 GITLEAKS_VERSION=8.21.2 TOFU_VERSION=1.11.5 ACTIONLINT_VERSION=1.7.12 HADOLINT_VERSION=2.15.1 TFLINT_VERSION=0.64.0 OSV_SCANNER_VERSION=2.7.0 RUFF_VERSION=0.17.1 YAMLLINT_VERSION=1.38.0 /bin/sh -c curl -fsSL -o /usr/local/bin/forgejo-runner "https://code.forgejo.org/forgejo/runner/releases/download/v${RUNNER_VERSION}/forgejo-runner-${RUNNER_VERSION}-linux-amd64" && chmod 0755 /usr/local/bin/forgejo-runner && forgejo-runner --version # buildkit |
| RUN |14 RUNNER_VERSION=13.2.0 KO_VERSION=0.18.0 CRANE_VERSION=0.22.1 NODE_MAJOR=22 PNPM_VERSION=9.12.3 SEMGREP_VERSION=1.90.0 GITLEAKS_VERSION=8.21.2 TOFU_VERSION=1.11.5 ACTIONLINT_VERSION=1.7.12 HADOLINT_VERSION=2.15.1 TFLINT_VERSION=0.64.0 OSV_SCANNER_VERSION=2.7.0 RUFF_VERSION=0.17.1 YAMLLINT_VERSION=1.38.0 /bin/sh -c curl -fsSL "https://github.com/ko-build/ko/releases/download/v${KO_VERSION}/ko_${KO_VERSION}_Linux_x86_64.tar.gz" | tar -xz -C /usr/local/bin ko && chmod 0755 /usr/local/bin/ko && ko version # buildkit |
| RUN |14 RUNNER_VERSION=13.2.0 KO_VERSION=0.18.0 CRANE_VERSION=0.22.1 NODE_MAJOR=22 PNPM_VERSION=9.12.3 SEMGREP_VERSION=1.90.0 GITLEAKS_VERSION=8.21.2 TOFU_VERSION=1.11.5 ACTIONLINT_VERSION=1.7.12 HADOLINT_VERSION=2.15.1 TFLINT_VERSION=0.64.0 OSV_SCANNER_VERSION=2.7.0 RUFF_VERSION=0.17.1 YAMLLINT_VERSION=1.38.0 /bin/sh -c set -eu; cd /tmp && base=https://github.com/google/go-containerregistry/releases/download/v${CRANE_VERSION} && curl -fsSLO "$base/go-containerregistry_Linux_x86_64.tar.gz" && curl -fsSL -o crane_checksums.txt "$base/checksums.txt" && grep " go-containerregistry_Linux_x86_64.tar.gz\$" crane_checksums.txt | sha256sum -c - && tar -xzf go-containerregistry_Linux_x86_64.tar.gz -C /usr/local/bin crane && chmod 0755 /usr/local/bin/crane && rm -rf /tmp/* && crane version # buildkit |
| RUN |14 RUNNER_VERSION=13.2.0 KO_VERSION=0.18.0 CRANE_VERSION=0.22.1 NODE_MAJOR=22 PNPM_VERSION=9.12.3 SEMGREP_VERSION=1.90.0 GITLEAKS_VERSION=8.21.2 TOFU_VERSION=1.11.5 ACTIONLINT_VERSION=1.7.12 HADOLINT_VERSION=2.15.1 TFLINT_VERSION=0.64.0 OSV_SCANNER_VERSION=2.7.0 RUFF_VERSION=0.17.1 YAMLLINT_VERSION=1.38.0 /bin/sh -c curl -fsSL "https://github.com/opentofu/opentofu/releases/download/v${TOFU_VERSION}/tofu_${TOFU_VERSION}_linux_amd64.tar.gz" | tar -xz -C /usr/local/bin tofu && chmod 0755 /usr/local/bin/tofu && tofu version # buildkit |
| COPY secret /usr/local/bin/secret # buildkit |
| RUN |14 RUNNER_VERSION=13.2.0 KO_VERSION=0.18.0 CRANE_VERSION=0.22.1 NODE_MAJOR=22 PNPM_VERSION=9.12.3 SEMGREP_VERSION=1.90.0 GITLEAKS_VERSION=8.21.2 TOFU_VERSION=1.11.5 ACTIONLINT_VERSION=1.7.12 HADOLINT_VERSION=2.15.1 TFLINT_VERSION=0.64.0 OSV_SCANNER_VERSION=2.7.0 RUFF_VERSION=0.17.1 YAMLLINT_VERSION=1.38.0 /bin/sh -c chmod 0755 /usr/local/bin/secret && secret 2>&1 | head -1 # buildkit |
| ENV GOPATH=/data/go GOCACHE=/data/go-build GOFLAGS=-buildvcs=false |
| WORKDIR /data |
| ENTRYPOINT ["/usr/local/bin/forgejo-runner"] |