VERSION ?= 0.2.1
BASE ?= latest-alpine-jdk11
REGISTRY := public.ecr.aws/zero-downtime
REPOSITORY := jenkins-podman
TAG := $(REPOSITORY):v$(VERSION)

ifeq ($(TRIVY_REMOTE),)
	TRIVY_OPTS := image
else
	TRIVY_OPTS := client --remote ${TRIVY_REMOTE}
endif

.PHONY: build push scan

all: build

build:
	podman build --rm --squash-all --build-arg BASE=$(BASE) -t $(TAG) .

push:
	aws ecr-public get-login-password --region us-east-1 | podman login --username AWS --password-stdin $(REGISTRY)
	podman tag $(TAG) $(REGISTRY)/$(TAG)
	podman push $(REGISTRY)/$(TAG)

scan:
	trivy $(TRIVY_OPTS) $(TAG)