Commit Graph

4 Commits

Author SHA1 Message Date
Paulo Gomes 68f083cb99
Add SBOM and Provenance layers
Signed-off-by: Paulo Gomes <pjbgf@linux.com>
2024-07-31 13:30:32 +01:00
Paulo Gomes 4168e18654
build: Avoid version logic being executed twice
The version logic is contained within hack/make/build.mk and is a pre-req for some of the Makefile targets.

The Makefile is used to kick off the building of the container image, and inside that
process make build is executed to compile security-scan. This change stops the version
logic from executing a second time by accepting a VERSION var to be set, therefore removing
the need for accessing the .git dir.

Signed-off-by: Paulo Gomes <paulo.gomes@suse.com>
2024-01-24 15:03:38 +00:00
Paulo Gomes 996449be80
build: Remove persistent changes
Instead of changing the default docker buildx machine, create it and refer
to it by its name. This ensures building this project does not disrupt
other workflows from a given contributor.

Signed-off-by: Paulo Gomes <paulo.gomes@suse.com>
2024-01-12 18:38:04 +00:00
Paulo Gomes d171603407
build: Refactor Makefile logic
The multi-stage dockerfile is now used to build the project binary, instead
of copying it from the host. This enforces that the binary is always rebuilt
whenever there is a change that invalidates the previous version - from a
container image perspective.

The makefile was restructured so that only the most important and relevant code
is present. In order to enable code reuse, build related logic was extracted to
hack/make/build.mk. All code related to installing tools is now placed in
hack/make/tools.mk.

Signed-off-by: Paulo Gomes <paulo.gomes@suse.com>
2024-01-12 17:47:31 +00:00