🌱 Use root user in distroless to support GitHub Actions (#994)

* Use root distroless to support GitHub Actions Signed-off-by: Spencer Schrock <[email protected]> * Add template policy file back. TODO determine if we should replace this with a different template Signed-off-by: Spencer Schrock <[email protected]> Signed-off-by: Spencer Schrock <[email protected]>
ossf · Oct 25, 2022 · d21d8f3 · d21d8f3
1 parent 65d39ac
commit d21d8f3
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/Dockerfile b/Dockerfile
@@ -35,6 +35,8 @@ ARG TARGETOS
 ARG TARGETARCH
 RUN CGO_ENABLED=0 make build
 
-FROM gcr.io/distroless/base:nonroot@sha256:99133cb0878bb1f84d1753957c6fd4b84f006f2798535de22ebf7ba170bbf434
+# Need root for GitHub Actions support
+FROM gcr.io/distroless/base@sha256:122585ba4c098993df9f8dc7285433e8a19974de32528ee3a4b07308808c84ce
 COPY --from=build /src/scorecard-action /
+COPY policies/template.yml /policy.yml
 ENTRYPOINT [ "/scorecard-action" ]