Skip to content

Conversation

bandhan-majumder
Copy link
Collaborator

added golang 1.23 and 1.24 image with alpine distro image

Signed-off-by: bandhan-majumder <bandhanmajumder16@gmail.com>
@bandhan-majumder bandhan-majumder requested a review from prabhu as a code owner June 1, 2025 15:26
Signed-off-by: bandhan-majumder <bandhanmajumder16@gmail.com>
*) echo >&2 "error: unsupported architecture: '$ARCH_NAME'"; exit 1 ;; \
esac \
&& cd /opt/cdxgen && corepack enable && corepack pnpm install --config.strict-dep-builds=true --prod --package-import-method copy --frozen-lockfile && corepack pnpm cache delete \
&& curl -L https://github.com/owasp-dep-scan/dosai/releases/latest/download/Dosai${DOSAI_ARCH_SUFFIX} -o /usr/local/bin/dosai \
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There are two issues:

  • dosai command is only required for dotnet images.
  • Use the linux musl binaries for alpine. Dosai-linux-musl-{amd64,arm64} when the image already includes dotnet-sdk-9.0 or Dosai-linux-musl-{amd64,arm64}-full for use without the sdk. Insert -musl to the variable DOSAI_ARCH_SUFFIX=

@@ -38,8 +38,10 @@ Below table summarizes all available container image versions. These images incl
| Ruby | 2.6.10 | ghcr.io/cyclonedx/cdxgen-debian-ruby26:v11 | Supports automatic Ruby installation for 2.6.x. Example: Pass `-t ruby2.6.1` to install Ruby 2.6.1. |
| Ruby | 1.8.x | ghcr.io/cyclonedx/debian-ruby18:master | Base image for `bundle install` only. No cdxgen equivalent with Ruby 1.8.x. `--deep` mode and research profile unsupported. |
| Swift | 6.0.x | ghcr.io/cyclonedx/cdxgen-debian-swift:v11 |
| golang | 1.24 | ghcr.io/cyclonedx/cdxgen-debian-golang124:v11, ghcr.io/cyclonedx/cdxgen-debian-golang:v11 | Golang 1.24 |
| golang | 1.23-alpine | ghcr.io/cyclonedx/cdxgen-alpine-golang123:v11 | Golang 1.23-alpine |
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

May be create a separate table for alpine images?

Signed-off-by: bandhan-majumder <bandhanmajumder16@gmail.com>
@bandhan-majumder
Copy link
Collaborator Author

fixing the mistakes

@prabhu prabhu merged commit 0e115a2 into CycloneDX:master Jun 1, 2025
68 of 69 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants