Skip to content

Commit

Permalink
Merge pull request #4 from quintoandar/fix-dockerfile
Browse files Browse the repository at this point in the history 
chore: fix dockerfile
  • Loading branch information
@eliasscosta
eliasscosta authored Oct 5, 2023
2 parents eec8680 + 2905bc0 commit 85a52b2
Showing 1 changed file with 7 additions and 6 deletions.
13 changes: 7 additions & 6 deletions Dockerfile
View file
Original file line number Diff line number Diff line change
Expand Up @@ -3,15 +3,16 @@ FROM golang:1.19-alpine as build
WORKDIR ${GOPATH}/src/github.com/quintoandar
RUN apk update && apk add make git curl && git clone --branch main https://github.com/quintoandar/postgres_exporter.git
WORKDIR ${GOPATH}/src/github.com/quintoandar/postgres_exporter
ENV GOARCH=amd64
RUN make release
RUN chmod +x postgres_exporter && mv postgres_exporter /tmp/postgres_exporter


FROM quay.io/prometheus/busybox:latest as final
LABEL maintainer="The Prometheus Authors <[email protected]>"

COPY --from=build ["/tmp/postgres_exporter", "/bin/postgres_exporter" ]
COPY --from=build ["/tmp/postgres_exporter", "/" ]

WORKDIR /opt/exporter

EXPOSE 9187

EXPOSE 9187
USER nobody
ENTRYPOINT [ "/bin/postgres_exporter" ]
ENTRYPOINT [ "/postgres_exporter" ]

1 comment on commit 85a52b2

@chip-n-dale
Copy link

@chip-n-dale chip-n-dale bot commented on 85a52b2 Oct 5, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi @eliasscosta!

The GitLeaks SecTool reported some possibly exposed credentials/secrets, how about giving them a look?

GitLeaks Alert Async 
[
 {
 "line": "REDACTED",
 "lineNumber": 1,
 "offender": "REDACTED",
 "offenderEntropy": -1,
 "commit": "db4c6e8ee70ed6f6f9c8f4f8ab4611f884d33ff1",
 "repo": "postgres_exporter",
 "repoURL": "",
 "leakURL": "",
 "rule": "Asymmetric Private Key",
 "commitMessage": "PMM-7806: add compatibility with percona pg exporter (#68)\n\n* add compatibility with old exporter",
 "author": "Alexey Mukas",
 "email": "[email protected]",
 "file": "testdata/ssl/client/server.key",
 "date": "2022-09-06T11:37:50+02:00",
 "tags": "key, AsymmetricPrivateKey"
 },
 {
 "line": "REDACTED",
 "lineNumber": 1,
 "offender": "REDACTED",
 "offenderEntropy": -1,
 "commit": "db4c6e8ee70ed6f6f9c8f4f8ab4611f884d33ff1",
 "repo": "postgres_exporter",
 "repoURL": "",
 "leakURL": "",
 "rule": "Asymmetric Private Key",
 "commitMessage": "PMM-7806: add compatibility with percona pg exporter (#68)\n\n* add compatibility with old exporter",
 "author": "Alexey Mukas",
 "email": "[email protected]",
 "file": "testdata/ssl/server/server.key",
 "date": "2022-09-06T11:37:50+02:00",
 "tags": "key, AsymmetricPrivateKey"
 },
 {
 "line": "REDACTED",
 "lineNumber": 1,
 "offender": "REDACTED",
 "offenderEntropy": -1,
 "commit": "dfbbcee47774fb44dd222fdb87850b0f9ec7f968",
 "repo": "postgres_exporter",
 "repoURL": "",
 "leakURL": "",
 "rule": "Asymmetric Private Key",
 "commitMessage": "PMM-4533 Test for SSL support. (#13)\n\n",
 "author": "Carlos Salguero",
 "email": "[email protected]",
 "file": "testdata/ssl/server.key",
 "date": "2019-08-23T06:11:49-03:00",
 "tags": "key, AsymmetricPrivateKey"
 }
]

In cases of false-positives, more information is available on GitLeaks FAQ
If you had any other problem or question during this process, be sure to contact us on the #security channel on Slack at the @team-appsec group!

Please sign in to comment.