Skip to content

Commit c8c4c5f

Browse files
committed
feat(docker): Update docker image
1 parent 648301e commit c8c4c5f

File tree

3 files changed

+36
-3
lines changed

3 files changed

+36
-3
lines changed

Dockerfile

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,7 @@ RUN apk update && \
2121
rm -rf /var/cache/apk/*
2222

2323
COPY --from=builder /app/target/codeql-extractor-action /usr/local/bin/codeql-extractor-action
24+
COPY --from=builder /app/entrypoint.sh /entrypoint.sh
2425

25-
ENTRYPOINT ["codeql-extractor-action" ]
26+
ENTRYPOINT [ "sh", "/entrypoint.sh" ]
2627

action.Dockerfile

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,3 @@
1-
FROM gcr.io/advanced-security/codeql-extractor-action:v0.0.1
1+
FROM gcr.io/advanced-security/codeql-extractor-action:v0.0.3
22

3-
ENTRYPOINT [ "codeql-extractor-action" ]
3+
ENTRYPOINT [ "sh", "/entrypoint.sh" ]

entrypoint.sh

Lines changed: 32 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,32 @@
1+
#!/bin/sh
2+
set -e
3+
4+
export CODEQL_PATH="${CODEQL_PATH:-/opt/codeql}"
5+
export CODEQL_CLI_VERSION="${CODEQL_CLI_VERSION:-latest}"
6+
7+
# Check for codeql
8+
if which codeql >/dev/null; then
9+
export CODEQL_BINARY="codeql"
10+
else
11+
mkdir -p "$CODEQL_PATH"
12+
echo "[+] Downloading CodeQL CLI..."
13+
if [ "$CODEQL_CLI_VERSION" = "latest" ]; then
14+
CODEQL_CLI_VERSION=$(gh release list --repo github/codeql-cli-binaries)
15+
fi
16+
echo "[+] CodeQL CLI version: $CODEQL_CLI_VERSION"
17+
18+
cd "$CODEQL_PATH"
19+
gh release download "v${CODEQL_CLI_VERSION}" \
20+
--repo https://github.com/github/codeql-cli-binaries \
21+
--pattern codeql-linux64.zip \
22+
--clobber \
23+
--output "$CODEQL_PATH/codeql-linux64.zip"
24+
25+
unzip -q "$CODEQL_PATH/codeql-linux64.zip" -d "$CODEQL_PATH"
26+
27+
export CODEQL_BINARY="$CODEQL_PATH/codeql"
28+
echo "Completed downloading CodeQL CLI."
29+
fi
30+
31+
codeql-extractor-action "$@"
32+

0 commit comments

Comments
 (0)