FROM  alpine:3.17
RUN apk --no-cache add ca-certificates \
    && apk --no-cache add curl \
    && apk --no-cache add git \
    && mkdir -p /data/gitleaks/data \
    && mkdir -p /data/code \
    && apk --no-cache add tzdata \
    && cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime \
    && echo "Shanghai/Asia" > /etc/timezone \
    && apk del tzdata

WORKDIR /app

COPY bin/gitleaks /data/gitleaks/
COPY rules/gitleaks.toml /data/gitleaks/
COPY bin/sec-cycle-scan-amd64 .
COPY conf.staging.yaml .
COPY conf.prod.yaml .

CMD ["/app/sec-cycle-scan-amd64"]