Files
Pulse/.devcontainer/Dockerfile
rcourtman abb5573243 feat(RC-01): pin Go toolchain to 1.25.7, clearing all stdlib vulns
Upgrades from go1.24.x to go1.25.7 across all surfaces:
- go.mod, Dockerfile, devcontainer, CI workflows, installer, build scripts
- govulncheck now exits 0 (was exit 3 with 3 reachable P1 findings)
- Zero remaining references to old toolchain version
2026-02-09 16:03:24 +00:00

25 lines
821 B
Docker

FROM golang:1.25.7
# Set bash as default shell for features
SHELL ["/bin/bash", "-c"]
# Install dev tools needed for hot-dev.sh
RUN apt-get update && apt-get install -y bash git make curl vim sudo lsof inotify-tools && rm -rf /var/lib/apt/lists/*
# Create non-root user
ARG USERNAME=vscode
ARG USER_UID=1000
ARG USER_GID=$USER_UID
RUN groupadd --gid $USER_GID $USERNAME && useradd --uid $USER_UID --gid $USER_GID -m $USERNAME -s /bin/bash && echo $USERNAME ALL=\(root\) NOPASSWD:ALL > /etc/sudoers.d/$USERNAME && chmod 0440 /etc/sudoers.d/$USERNAME
# Set up Go environment for non-root user
ENV GOPATH=/go
ENV PATH=$GOPATH/bin:$PATH
RUN mkdir -p $GOPATH/pkg $GOPATH/bin && chown -R $USERNAME:$USERNAME $GOPATH
USER $USERNAME
WORKDIR /workspace
CMD ["/bin/bash"]