first commit

golang.yml

@@ -0,0 +1,29 @@
+# syntax=dhi.io/build:2-alpine3.23
+
+contents:
+  repositories:
+    - https://dl-cdn.alpinelinux.org/alpine/v3.23/main
+  packages:
+    - ca-certificates
+
+accounts:
+  groups:
+    - gid: 65532
+      name: appuser
+  users:
+    - uid: 65532
+      gid: 65532
+      name: appuser
+  run-as: appuser
+
+work-dir: /
+
+environment:
+  PATH: /usr/local/bin:/usr/bin:/bin
+
+entrypoint:
+  - /server
+
+annotations:
+  org.opencontainers.image.title: "hardened-go-runtime"
+  org.opencontainers.image.description: "Attack-surface-free execution environment for compiled Go binaries"