VERSION ?= 0.1.1
BASE ?= latest-alpine-jdk11
REGISTRY := public.ecr.aws/zero-downtime
REPOSITORY := jenkins-podman
TAG := $(REPOSITORY):v$(VERSION)

.PHONY: build push clean scan

all: build

build:
	podman build --rm --squash-all --build-arg BASE=$(BASE) -t $(TAG) .

push:
	aws ecr-public get-login-password --region us-east-1 | podman login --username AWS --password-stdin $(REGISTRY)
	podman tag $(TAG) $(REGISTRY)/$(TAG)
	podman push $(REGISTRY)/$(TAG)

clean:
	rm -f image.tar trivy-report.html

scan:
	[ -f image.tar ] || podman save $(TAG) -o image.tar
	trivy image --input image.tar