# syntax=dhi.io/build:2-alpine3.23

contents:
  repositories:
    - https://dl-cdn.alpinelinux.org/alpine/v3.23/main
  packages:
    - ca-certificates

accounts:
  groups:
    - gid: 65532
      name: appuser
  users:
    - uid: 65532
      gid: 65532
      name: appuser
  run-as: appuser

work-dir: /

environment:
  PATH: /usr/local/bin:/usr/bin:/bin

entrypoint:
  - /server

annotations:
  org.opencontainers.image.title: "hardened-go-runtime"
  org.opencontainers.image.description: "Attack-surface-free execution environment for compiled Go binaries"