[goreleaser] refactor: update Dockerfile to copy pre-built binary and…

… simplify goreleaser config

Co-Authored-By: [email protected] <[email protected]>

contrib/golang-ci-lint/.goreleaser.yml

@@ -13,7 +13,6 @@ builds:
       - -s -w -extldflags '-static'
     tags:
       - netgo
-      - osusergo
     env:
       - CGO_ENABLED=0
     main: main.go
@@ -38,11 +37,6 @@ dockers:
       - '--label=org.opencontainers.image.version={{.Version}}'
       - '--label=org.opencontainers.image.source={{.GitURL}}'
     dockerfile: ../../docker/golang-ci-lint.Dockerfile
-    extra_files:
-      - go.mod
-      - go.sum
-      - main.go
-      - permissions/
     ids:
       - golang-ci-lint
 

docker/golang-ci-lint.Dockerfile

@@ -1,16 +1,4 @@
-# syntax=docker/dockerfile:1.4
-
-FROM golang:1.21-alpine AS builder
-
-WORKDIR /build
-COPY . .
-RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 \
-    go build -o /build/bin/golang-ci-lint \
-    -ldflags="-s -w -extldflags '-static'" \
-    -tags netgo,osusergo \
-    -trimpath
-
-FROM alpine:3.18
+FROM gcr.io/distroless/static:latest
 
 LABEL org.opencontainers.image.source="https://github.com/synapsecns/sanguine"
 LABEL org.opencontainers.image.description="Golang-CI-Lint version manager for Sanguine"
@@ -19,7 +7,9 @@ LABEL org.opencontainers.image.licenses="MIT"
 LABEL org.opencontainers.image.vendor="Synapse Labs"
 LABEL org.opencontainers.image.documentation="https://github.com/synapsecns/sanguine/tree/master/contrib/golang-ci-lint"
 
-COPY --from=builder /build/bin/golang-ci-lint /usr/local/bin/
-RUN chmod +x /usr/local/bin/golang-ci-lint
+USER nonroot:nonroot
+
+WORKDIR /app
+COPY --chown=nonroot:nonroot golang-ci-lint /app/golang-ci-lint
 
-ENTRYPOINT ["/usr/local/bin/golang-ci-lint"]
+ENTRYPOINT ["/app/golang-ci-lint"]