Run update.sh --doc

oxsecurity · Apr 13, 2023 · a83a139 · a83a139
1 parent 2990b27
commit a83a139
Show file tree

Hide file tree

Showing 136 changed files with 703 additions and 660 deletions.
diff --git a/docs/descriptors/arm.md b/docs/descriptors/arm.md
@@ -35,15 +35,20 @@ description: arm-ttk is available to analyze ARM files in MegaLinter
 
 - Dockerfile commands :
 ```dockerfile
+ARG TARGETPLATFORM
 ARG PWSH_VERSION='latest'
 ARG PWSH_DIRECTORY='/opt/microsoft/powershell'
-RUN mkdir -p ${PWSH_DIRECTORY} \
+RUN case ${TARGETPLATFORM} in \
+      "linux/amd64")  POWERSHELL_ARCH=alpine-x64 ;; \
+      "linux/arm64")  POWERSHELL_ARCH=arm64      ;; \
+    esac \
+    && mkdir -p ${PWSH_DIRECTORY} \
     && curl --retry 5 --retry-delay 5 -s \
        -H "Accept: application/vnd.github+json" \
        -H "Authorization: Bearer $(cat /run/secrets/GITHUB_TOKEN)" \
        https://api.github.com/repos/powershell/powershell/releases/${PWSH_VERSION} \
         | grep browser_download_url \
-        | grep linux-alpine-x64 \
+        | grep linux-${POWERSHELL_ARCH} \
         | cut -d '"' -f 4 \
         | xargs -n 1 wget -O - \
         | tar -xzC ${PWSH_DIRECTORY} \

diff --git a/docs/descriptors/arm_arm_ttk.md b/docs/descriptors/arm_arm_ttk.md
@@ -102,15 +102,20 @@ pwsh -NoProfile -NoLogo -Command "
 - Dockerfile commands :
 ```dockerfile
 # Parent descriptor install
+ARG TARGETPLATFORM
 ARG PWSH_VERSION='latest'
 ARG PWSH_DIRECTORY='/opt/microsoft/powershell'
-RUN mkdir -p ${PWSH_DIRECTORY} \
+RUN case ${TARGETPLATFORM} in \
+      "linux/amd64")  POWERSHELL_ARCH=alpine-x64 ;; \
+      "linux/arm64")  POWERSHELL_ARCH=arm64      ;; \
+    esac \
+    && mkdir -p ${PWSH_DIRECTORY} \
     && curl --retry 5 --retry-delay 5 -s \
        -H "Accept: application/vnd.github+json" \
        -H "Authorization: Bearer $(cat /run/secrets/GITHUB_TOKEN)" \
        https://api.github.com/repos/powershell/powershell/releases/${PWSH_VERSION} \
         | grep browser_download_url \
-        | grep linux-alpine-x64 \
+        | grep linux-${POWERSHELL_ARCH} \
         | cut -d '"' -f 4 \
         | xargs -n 1 wget -O - \
         | tar -xzC ${PWSH_DIRECTORY} \

diff --git a/docs/descriptors/bicep_bicep_linter.md b/docs/descriptors/bicep_bicep_linter.md
@@ -220,12 +220,16 @@ Usage:
 
 - Dockerfile commands :
 ```dockerfile
+ARG TARGETPLATFORM
 ARG BICEP_EXE='bicep'
-ARG BICEP_URI='https://github.com/Azure/bicep/releases/latest/download/bicep-linux-musl-x64'
 ARG BICEP_DIR='/usr/local/bin'
-RUN curl --retry 5 --retry-delay 5 -sLo ${BICEP_EXE} "${BICEP_URI}" \
-    && chmod +x "${BICEP_EXE}" \
-    && mv "${BICEP_EXE}" "${BICEP_DIR}"
+RUN case ${TARGETPLATFORM} in \
+  "linux/amd64")  POWERSHELL_ARCH=musl-x64 ;; \
+  "linux/arm64")  POWERSHELL_ARCH=arm64    ;; \
+esac \
+&& curl --retry 5 --retry-delay 5 -sLo ${BICEP_EXE} "https://github.com/Azure/bicep/releases/latest/download/bicep-linux-${POWERSHELL_ARCH}" \
+&& chmod +x "${BICEP_EXE}" \
+&& mv "${BICEP_EXE}" "${BICEP_DIR}"
 
 ```
 
diff --git a/docs/descriptors/dart_dartanalyzer.md b/docs/descriptors/dart_dartanalyzer.md
@@ -116,12 +116,17 @@ For more information, see https://www.dartlang.org/tools/analyzer.
 
 - Dockerfile commands :
 ```dockerfile
+ARG TARGETPLATFORM
 ARG DART_VERSION='2.8.4'
 ARG GLIBC_VERSION='2.34-r0'
-RUN wget --tries=50 -q -O /etc/apk/keys/sgerrand.rsa.pub https://alpine-pkgs.sgerrand.com/sgerrand.rsa.pub \
+RUN case ${TARGETPLATFORM} in \
+      "linux/amd64")  DART_ARCH=x64   ;; \
+      "linux/arm64")  DART_ARCH=arm64 ;; \
+    esac \
+    && wget --tries=5 -q -O /etc/apk/keys/sgerrand.rsa.pub https://alpine-pkgs.sgerrand.com/sgerrand.rsa.pub \
     && wget --tries=5 -q https://github.com/sgerrand/alpine-pkg-glibc/releases/download/${GLIBC_VERSION}/glibc-${GLIBC_VERSION}.apk \
-    && apk add --force-overwrite --no-cache glibc-${GLIBC_VERSION}.apk && rm glibc-${GLIBC_VERSION}.apk \
-    && wget --tries=5 https://storage.googleapis.com/dart-archive/channels/stable/release/${DART_VERSION}/sdk/dartsdk-linux-x64-release.zip -O - -q | unzip -q - \
+    && apk add --no-cache glibc-${GLIBC_VERSION}.apk && rm glibc-${GLIBC_VERSION}.apk \
+    && wget --tries=5 https://storage.googleapis.com/dart-archive/channels/stable/release/${DART_VERSION}/sdk/dartsdk-linux-${DART_ARCH}-release.zip -O - -q | unzip -q - \
     && chmod +x dart-sdk/bin/dart* \
     && mv dart-sdk/bin/* /usr/bin/ && mv dart-sdk/lib/* /usr/lib/ && mv dart-sdk/include/* /usr/include/ \
     && rm -r dart-sdk/

diff --git a/docs/descriptors/kubernetes_kubeconform.md b/docs/descriptors/kubernetes_kubeconform.md
@@ -131,13 +131,18 @@ Usage: kubeconform [OPTION]... [FILE OR FOLDER]...
 
 - Dockerfile commands :
 ```dockerfile
-RUN ML_THIRD_PARTY_DIR="/third-party/kubeconform" \
+ARG TARGETPLATFORM
+RUN case ${TARGETPLATFORM} in \
+      "linux/amd64")   KUBECONFORM_ARCH=linux-amd64   ;; \
+      "linux/arm64")   KUBECONFORM_ARCH=linux-arm64   ;; \
+    esac \
+    && ML_THIRD_PARTY_DIR="/third-party/kubeconform" \
     && KUBECONFORM_VERSION=v0.5.0 \
     && mkdir -p ${ML_THIRD_PARTY_DIR} \
-    && wget -P ${ML_THIRD_PARTY_DIR} -q https://github.com/yannh/kubeconform/releases/download/$KUBECONFORM_VERSION/kubeconform-linux-amd64.tar.gz \
-    && tar xf ${ML_THIRD_PARTY_DIR}/kubeconform-linux-amd64.tar.gz --directory ${ML_THIRD_PARTY_DIR} \
+    && wget -P ${ML_THIRD_PARTY_DIR} -q https://github.com/yannh/kubeconform/releases/download/$KUBECONFORM_VERSION/kubeconform-${KUBECONFORM_ARCH}.tar.gz \
+    && tar xf ${ML_THIRD_PARTY_DIR}/kubeconform-${KUBECONFORM_ARCH}.tar.gz --directory ${ML_THIRD_PARTY_DIR} \
     && mv ${ML_THIRD_PARTY_DIR}/kubeconform /usr/local/bin \
-    && rm ${ML_THIRD_PARTY_DIR}/kubeconform-linux-amd64.tar.gz \
+    && rm ${ML_THIRD_PARTY_DIR}/kubeconform-${KUBECONFORM_ARCH}.tar.gz \
     && find ${ML_THIRD_PARTY_DIR} -type f -not -name 'LICENSE*' -delete -o -type d -empty -delete
 
 ```

diff --git a/docs/descriptors/kubernetes_kubeval.md b/docs/descriptors/kubernetes_kubeval.md
@@ -119,12 +119,16 @@ Flags:
 
 - Dockerfile commands :
 ```dockerfile
-RUN ML_THIRD_PARTY_DIR="/third-party/kubeval" \
+ARG TARGETPLATFORM
+RUN case ${TARGETPLATFORM} in \
+      "linux/amd64")   KUBEVAL_ARCH=linux-amd64   ;; \
+    esac \
+    && ML_THIRD_PARTY_DIR="/third-party/kubeval" \
     && mkdir -p ${ML_THIRD_PARTY_DIR} \
-    && wget -P ${ML_THIRD_PARTY_DIR} -q https://github.com/instrumenta/kubeval/releases/latest/download/kubeval-linux-amd64.tar.gz \
-    && tar xf ${ML_THIRD_PARTY_DIR}/kubeval-linux-amd64.tar.gz --directory ${ML_THIRD_PARTY_DIR} \
+    && wget -P ${ML_THIRD_PARTY_DIR} -q https://github.com/instrumenta/kubeval/releases/latest/download/kubeval-${KUBEVAL_ARCH}.tar.gz \
+    && tar xf ${ML_THIRD_PARTY_DIR}/kubeval-${KUBEVAL_ARCH}.tar.gz --directory ${ML_THIRD_PARTY_DIR} \
     && mv ${ML_THIRD_PARTY_DIR}/kubeval /usr/local/bin \
-    && rm ${ML_THIRD_PARTY_DIR}/kubeval-linux-amd64.tar.gz \
+    && rm ${ML_THIRD_PARTY_DIR}/kubeval-${KUBEVAL_ARCH}.tar.gz \
     && find ${ML_THIRD_PARTY_DIR} -type f -not -name 'LICENSE*' -delete -o -type d -empty -delete
 
 ```

diff --git a/docs/descriptors/powershell.md b/docs/descriptors/powershell.md
@@ -39,15 +39,20 @@ description: powershell, powershell_formatter are available to analyze POWERSHEL
 
 - Dockerfile commands :
 ```dockerfile
+ARG TARGETPLATFORM
 ARG PWSH_VERSION='latest'
 ARG PWSH_DIRECTORY='/opt/microsoft/powershell'
-RUN mkdir -p ${PWSH_DIRECTORY} \
+RUN case ${TARGETPLATFORM} in \
+      "linux/amd64")  POWERSHELL_ARCH=alpine-x64 ;; \
+      "linux/arm64")  POWERSHELL_ARCH=arm64      ;; \
+    esac \
+    && mkdir -p ${PWSH_DIRECTORY} \
     && curl --retry 5 --retry-delay 5 -s \
        -H "Accept: application/vnd.github+json" \
        -H "Authorization: Bearer $(cat /run/secrets/GITHUB_TOKEN)" \
        https://api.github.com/repos/powershell/powershell/releases/${PWSH_VERSION} \
         | grep browser_download_url \
-        | grep linux-alpine-x64 \
+        | grep linux-${POWERSHELL_ARCH} \
         | cut -d '"' -f 4 \
         | xargs -n 1 wget -O - \
         | tar -xzC ${PWSH_DIRECTORY} \

diff --git a/docs/descriptors/powershell_powershell.md b/docs/descriptors/powershell_powershell.md
@@ -404,15 +404,20 @@ All parameters are case-insensitive.
 - Dockerfile commands :
 ```dockerfile
 # Parent descriptor install
+ARG TARGETPLATFORM
 ARG PWSH_VERSION='latest'
 ARG PWSH_DIRECTORY='/opt/microsoft/powershell'
-RUN mkdir -p ${PWSH_DIRECTORY} \
+RUN case ${TARGETPLATFORM} in \
+      "linux/amd64")  POWERSHELL_ARCH=alpine-x64 ;; \
+      "linux/arm64")  POWERSHELL_ARCH=arm64      ;; \
+    esac \
+    && mkdir -p ${PWSH_DIRECTORY} \
     && curl --retry 5 --retry-delay 5 -s \
        -H "Accept: application/vnd.github+json" \
        -H "Authorization: Bearer $(cat /run/secrets/GITHUB_TOKEN)" \
        https://api.github.com/repos/powershell/powershell/releases/${PWSH_VERSION} \
         | grep browser_download_url \
-        | grep linux-alpine-x64 \
+        | grep linux-${POWERSHELL_ARCH} \
         | cut -d '"' -f 4 \
         | xargs -n 1 wget -O - \
         | tar -xzC ${PWSH_DIRECTORY} \

diff --git a/docs/descriptors/powershell_powershell_formatter.md b/docs/descriptors/powershell_powershell_formatter.md
@@ -405,15 +405,20 @@ All parameters are case-insensitive.
 - Dockerfile commands :
 ```dockerfile
 # Parent descriptor install
+ARG TARGETPLATFORM
 ARG PWSH_VERSION='latest'
 ARG PWSH_DIRECTORY='/opt/microsoft/powershell'
-RUN mkdir -p ${PWSH_DIRECTORY} \
+RUN case ${TARGETPLATFORM} in \
+      "linux/amd64")  POWERSHELL_ARCH=alpine-x64 ;; \
+      "linux/arm64")  POWERSHELL_ARCH=arm64      ;; \
+    esac \
+    && mkdir -p ${PWSH_DIRECTORY} \
     && curl --retry 5 --retry-delay 5 -s \
        -H "Accept: application/vnd.github+json" \
        -H "Authorization: Bearer $(cat /run/secrets/GITHUB_TOKEN)" \
        https://api.github.com/repos/powershell/powershell/releases/${PWSH_VERSION} \
         | grep browser_download_url \
-        | grep linux-alpine-x64 \
+        | grep linux-${POWERSHELL_ARCH} \
         | cut -d '"' -f 4 \
         | xargs -n 1 wget -O - \
         | tar -xzC ${PWSH_DIRECTORY} \

diff --git a/flavors/ci_light/Dockerfile b/flavors/ci_light/Dockerfile
@@ -28,12 +28,12 @@ FROM multiarch/qemu-user-static:x86_64-aarch64 as qemu
 FROM python:3.11.2-alpine3.17
 ARG GITHUB_TOKEN
 
- # https://stackoverflow.com/a/73711302/699056
+# https://stackoverflow.com/a/73711302/699056
 COPY --from=qemu /usr/bin/qemu-aarch64-static /usr/bin/
- # https://stackoverflow.com/a/73711302/699056
- # https://stackoverflow.com/a/73359981/699056
- # https://stackoverflow.com/a/71209637/699056
-RUN apk add --update libc6-compat \
+# https://stackoverflow.com/a/73711302/699056
+# https://stackoverflow.com/a/73359981/699056
+# https://stackoverflow.com/a/71209637/699056
+RUN apk add --update --no-cache libc6-compat \
                      gcompat \
                      qemu-x86_64
 

diff --git a/flavors/cupcake/Dockerfile b/flavors/cupcake/Dockerfile
@@ -47,12 +47,12 @@ FROM multiarch/qemu-user-static:x86_64-aarch64 as qemu
 FROM python:3.11.2-alpine3.17
 ARG GITHUB_TOKEN
 
- # https://stackoverflow.com/a/73711302/699056
+# https://stackoverflow.com/a/73711302/699056
 COPY --from=qemu /usr/bin/qemu-aarch64-static /usr/bin/
- # https://stackoverflow.com/a/73711302/699056
- # https://stackoverflow.com/a/73359981/699056
- # https://stackoverflow.com/a/71209637/699056
-RUN apk add --update libc6-compat \
+# https://stackoverflow.com/a/73711302/699056
+# https://stackoverflow.com/a/73359981/699056
+# https://stackoverflow.com/a/71209637/699056
+RUN apk add --update --no-cache libc6-compat \
                      gcompat \
                      qemu-x86_64
 

diff --git a/flavors/documentation/Dockerfile b/flavors/documentation/Dockerfile
@@ -35,12 +35,12 @@ FROM multiarch/qemu-user-static:x86_64-aarch64 as qemu
 FROM python:3.11.2-alpine3.17
 ARG GITHUB_TOKEN
 
- # https://stackoverflow.com/a/73711302/699056
+# https://stackoverflow.com/a/73711302/699056
 COPY --from=qemu /usr/bin/qemu-aarch64-static /usr/bin/
- # https://stackoverflow.com/a/73711302/699056
- # https://stackoverflow.com/a/73359981/699056
- # https://stackoverflow.com/a/71209637/699056
-RUN apk add --update libc6-compat \
+# https://stackoverflow.com/a/73711302/699056
+# https://stackoverflow.com/a/73359981/699056
+# https://stackoverflow.com/a/71209637/699056
+RUN apk add --update --no-cache libc6-compat \
                      gcompat \
                      qemu-x86_64
 

diff --git a/flavors/dotnet/Dockerfile b/flavors/dotnet/Dockerfile
@@ -35,12 +35,12 @@ FROM multiarch/qemu-user-static:x86_64-aarch64 as qemu
 FROM python:3.11.2-alpine3.17
 ARG GITHUB_TOKEN
 
- # https://stackoverflow.com/a/73711302/699056
+# https://stackoverflow.com/a/73711302/699056
 COPY --from=qemu /usr/bin/qemu-aarch64-static /usr/bin/
- # https://stackoverflow.com/a/73711302/699056
- # https://stackoverflow.com/a/73359981/699056
- # https://stackoverflow.com/a/71209637/699056
-RUN apk add --update libc6-compat \
+# https://stackoverflow.com/a/73711302/699056
+# https://stackoverflow.com/a/73359981/699056
+# https://stackoverflow.com/a/71209637/699056
+RUN apk add --update --no-cache libc6-compat \
                      gcompat \
                      qemu-x86_64
 

diff --git a/flavors/go/Dockerfile b/flavors/go/Dockerfile
@@ -41,12 +41,12 @@ FROM multiarch/qemu-user-static:x86_64-aarch64 as qemu
 FROM python:3.11.2-alpine3.17
 ARG GITHUB_TOKEN
 
- # https://stackoverflow.com/a/73711302/699056
+# https://stackoverflow.com/a/73711302/699056
 COPY --from=qemu /usr/bin/qemu-aarch64-static /usr/bin/
- # https://stackoverflow.com/a/73711302/699056
- # https://stackoverflow.com/a/73359981/699056
- # https://stackoverflow.com/a/71209637/699056
-RUN apk add --update libc6-compat \
+# https://stackoverflow.com/a/73711302/699056
+# https://stackoverflow.com/a/73359981/699056
+# https://stackoverflow.com/a/71209637/699056
+RUN apk add --update --no-cache libc6-compat \
                      gcompat \
                      qemu-x86_64
 

diff --git a/flavors/java/Dockerfile b/flavors/java/Dockerfile
@@ -35,12 +35,12 @@ FROM multiarch/qemu-user-static:x86_64-aarch64 as qemu
 FROM python:3.11.2-alpine3.17
 ARG GITHUB_TOKEN
 
- # https://stackoverflow.com/a/73711302/699056
+# https://stackoverflow.com/a/73711302/699056
 COPY --from=qemu /usr/bin/qemu-aarch64-static /usr/bin/
- # https://stackoverflow.com/a/73711302/699056
- # https://stackoverflow.com/a/73359981/699056
- # https://stackoverflow.com/a/71209637/699056
-RUN apk add --update libc6-compat \
+# https://stackoverflow.com/a/73711302/699056
+# https://stackoverflow.com/a/73359981/699056
+# https://stackoverflow.com/a/71209637/699056
+RUN apk add --update --no-cache libc6-compat \
                      gcompat \
                      qemu-x86_64
 

diff --git a/flavors/javascript/Dockerfile b/flavors/javascript/Dockerfile
@@ -34,12 +34,12 @@ FROM multiarch/qemu-user-static:x86_64-aarch64 as qemu
 FROM python:3.11.2-alpine3.17
 ARG GITHUB_TOKEN
 
- # https://stackoverflow.com/a/73711302/699056
+# https://stackoverflow.com/a/73711302/699056
 COPY --from=qemu /usr/bin/qemu-aarch64-static /usr/bin/
- # https://stackoverflow.com/a/73711302/699056
- # https://stackoverflow.com/a/73359981/699056
- # https://stackoverflow.com/a/71209637/699056
-RUN apk add --update libc6-compat \
+# https://stackoverflow.com/a/73711302/699056
+# https://stackoverflow.com/a/73359981/699056
+# https://stackoverflow.com/a/71209637/699056
+RUN apk add --update --no-cache libc6-compat \
                      gcompat \
                      qemu-x86_64
 

diff --git a/flavors/php/Dockerfile b/flavors/php/Dockerfile
@@ -35,12 +35,12 @@ FROM multiarch/qemu-user-static:x86_64-aarch64 as qemu
 FROM python:3.11.2-alpine3.17
 ARG GITHUB_TOKEN
 
- # https://stackoverflow.com/a/73711302/699056
+# https://stackoverflow.com/a/73711302/699056
 COPY --from=qemu /usr/bin/qemu-aarch64-static /usr/bin/
- # https://stackoverflow.com/a/73711302/699056
- # https://stackoverflow.com/a/73359981/699056
- # https://stackoverflow.com/a/71209637/699056
-RUN apk add --update libc6-compat \
+# https://stackoverflow.com/a/73711302/699056
+# https://stackoverflow.com/a/73359981/699056
+# https://stackoverflow.com/a/71209637/699056
+RUN apk add --update --no-cache libc6-compat \
                      gcompat \
                      qemu-x86_64
 

diff --git a/flavors/python/Dockerfile b/flavors/python/Dockerfile
@@ -35,12 +35,12 @@ FROM multiarch/qemu-user-static:x86_64-aarch64 as qemu
 FROM python:3.11.2-alpine3.17
 ARG GITHUB_TOKEN
 
- # https://stackoverflow.com/a/73711302/699056
+# https://stackoverflow.com/a/73711302/699056
 COPY --from=qemu /usr/bin/qemu-aarch64-static /usr/bin/
- # https://stackoverflow.com/a/73711302/699056
- # https://stackoverflow.com/a/73359981/699056
- # https://stackoverflow.com/a/71209637/699056
-RUN apk add --update libc6-compat \
+# https://stackoverflow.com/a/73711302/699056
+# https://stackoverflow.com/a/73359981/699056
+# https://stackoverflow.com/a/71209637/699056
+RUN apk add --update --no-cache libc6-compat \
                      gcompat \
                      qemu-x86_64
 

diff --git a/flavors/ruby/Dockerfile b/flavors/ruby/Dockerfile
@@ -34,12 +34,12 @@ FROM multiarch/qemu-user-static:x86_64-aarch64 as qemu
 FROM python:3.11.2-alpine3.17
 ARG GITHUB_TOKEN
 
- # https://stackoverflow.com/a/73711302/699056
+# https://stackoverflow.com/a/73711302/699056
 COPY --from=qemu /usr/bin/qemu-aarch64-static /usr/bin/
- # https://stackoverflow.com/a/73711302/699056
- # https://stackoverflow.com/a/73359981/699056
- # https://stackoverflow.com/a/71209637/699056
-RUN apk add --update libc6-compat \
+# https://stackoverflow.com/a/73711302/699056
+# https://stackoverflow.com/a/73359981/699056
+# https://stackoverflow.com/a/71209637/699056
+RUN apk add --update --no-cache libc6-compat \
                      gcompat \
                      qemu-x86_64
 

diff --git a/flavors/rust/Dockerfile b/flavors/rust/Dockerfile
@@ -34,12 +34,12 @@ FROM multiarch/qemu-user-static:x86_64-aarch64 as qemu
 FROM python:3.11.2-alpine3.17
 ARG GITHUB_TOKEN
 
- # https://stackoverflow.com/a/73711302/699056
+# https://stackoverflow.com/a/73711302/699056
 COPY --from=qemu /usr/bin/qemu-aarch64-static /usr/bin/
- # https://stackoverflow.com/a/73711302/699056
- # https://stackoverflow.com/a/73359981/699056
- # https://stackoverflow.com/a/71209637/699056
-RUN apk add --update libc6-compat \
+# https://stackoverflow.com/a/73711302/699056
+# https://stackoverflow.com/a/73359981/699056
+# https://stackoverflow.com/a/71209637/699056
+RUN apk add --update --no-cache libc6-compat \
                      gcompat \
                      qemu-x86_64