31 lines
704 B
Makefile
31 lines
704 B
Makefile
VERSION ?= 0.1.2
|
|
BASE ?= latest-alpine-jdk11
|
|
REGISTRY := public.ecr.aws/zero-downtime
|
|
REPOSITORY := jenkins-podman
|
|
TAG := $(REPOSITORY):v$(VERSION)
|
|
|
|
ifeq ($(TRIVY_REMOTE),)
|
|
TRIVY_OPTS := image
|
|
else
|
|
TRIVY_OPTS := client --remote ${TRIVY_REMOTE}
|
|
endif
|
|
|
|
.PHONY: build push clean scan
|
|
|
|
all: build
|
|
|
|
build:
|
|
podman build --rm --squash-all --build-arg BASE=$(BASE) -t $(TAG) .
|
|
|
|
push:
|
|
aws ecr-public get-login-password --region us-east-1 | podman login --username AWS --password-stdin $(REGISTRY)
|
|
podman tag $(TAG) $(REGISTRY)/$(TAG)
|
|
podman push $(REGISTRY)/$(TAG)
|
|
|
|
clean:
|
|
rm -f image.tar trivy-report.html
|
|
|
|
scan:
|
|
[ -f image.tar ] || podman save $(TAG) -o image.tar
|
|
trivy $(TRIVY_OPTS) --input image.tar
|