content: #
  # Copyright (c) 2021-present Sonatype, Inc.
  #
  # Licensed under the Apache License, Version 2.0 (the "License");
  # you may not use this file except in compliance with the License.
  # You may obtain a copy of the License at
  #
  #     http://www.apache.org/licenses/LICENSE-2.0
  #
  # Unless required by applicable law or agreed to in writing, software
  # distributed under the License is distributed on an "AS IS" BASIS,
  # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  # See the License for the specific language governing permissions and
  # limitations under the License.
  #
  
  FROM docker-all.repo.sonatype.com/cdi/golang-1.17.1:2
  
  RUN apt-get update && apt-get install -y curl
  
  ENV GOPATH=
  
  # install nancy so we can run scans
  USER jenkins
  # Install prebuilt nancy binary.
  RUN  cd /tmp && mkdir tools && cd - && \
       latest_version_is=$(curl --fail -s https://api.github.com/repos/sonatype-nexus-community/nancy/releases/latest | grep -oP '"tag_name": "\K(.*)(?=")') && \
       desiredVersion=${latest_version_is} && \
       sourceUrl="https://github.com/sonatype-nexus-community/nancy/releases/download/${desiredVersion}/nancy-${desiredVersion}-linux-amd64" && \
       curl --fail -s -L "$sourceUrl" -o "/tmp/tools/nancy" && \
       chmod +x /tmp/tools/nancy
  
  #  root dir mounted as workspace. instead, for local testing, use: docker run -it -v $(pwd):/ws ...
  #COPY . .
  