emeraldsquad/alpine-scripting repository overview

Docker image with tools useful for scripting. This image is scanned by trivy to detect vulnerabilities before its release. Only the non-vulnerable image will be published on Docker Hub.

⁠Supported tools

• bash
• bc
• coreutils
• curl
• findutils
• gawk
• gettext
• git
• grep
• jq
• openssh-client
• openssl
• pwgen
• sed
• tar
• tzdata
• wget
• xmlstarlet
• yq
• zip

⁠Concourse Image Resource

image_resource:
    type: docker-image
    source:
        repository: emeraldsquad/alpine-scripting
        tag: 2.0.4

⁠Note

Starting from tag 2.0.3, a new added parameter --mount=type=secret,id=SERVICE_ACCOUNT_TOKEN in dockerfile which has been included from tag v0.11.0 of oci-build-task image. This parameter is used to pass and create a secret under /run/secrets/SERVICE_ACCOUNT_TOKEN (in our case, it's the token of our service account) to the script install-yq4.sh to make a GitHub API call. Hence, it is necessary to use a tag higher than 5.20.0 of concourse-tasks that includes the latest version of oci-build-task. See parameter $BUILDKIT_SECRET_* in https://github.com/concourse/oci-build-task#params⁠