FROM registry.access.redhat.com/ubi9/go-toolset:1.22 AS build
WORKDIR /opt/app-root/src
COPY go.mod go.sum ./
RUN go mod download
COPY . .
ARG GIT_COMMIT=unknown
ENV CGO_ENABLED=0
RUN go build -trimpath -buildvcs=false -ldflags "-s -w -X main.commit=${GIT_COMMIT}" -o /tmp/demo-secure .

FROM registry.access.redhat.com/ubi9-minimal:latest
LABEL org.opencontainers.image.title="demo-secure" \
      org.opencontainers.image.description="RHADS supply-chain demo service" \
      org.opencontainers.image.source="http://nas1.internal.hilltopcampground.net:23232/openshift-lab/bootstrap"
COPY --from=build /tmp/demo-secure /usr/local/bin/demo-secure
USER 1001
EXPOSE 8080
ENTRYPOINT ["/usr/local/bin/demo-secure"]