Adopt hardened-build-base to get correct go toolchain (#107)

mallardduck · web-flow · commit 251ec6dbe957 · 2026-05-14T13:06:35.000-04:00
* Adopt hardened-build-base to get correct go toolchain

* unblock un-draft step
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -127,7 +127,7 @@ jobs:
 
   release:
     name: Un-draft release
-    runs-on: runs-on,image=ubuntu22-full-x64,runner=4cpu-linux-x64,run-id=${{ github.run_id }}
+    runs-on: ubuntu-latest
     needs: [ ci, goreleaser, image ]
     permissions:
       contents: write
diff --git a/package/Dockerfile b/package/Dockerfile
@@ -1,4 +1,4 @@
-FROM registry.suse.com/bci/golang:1.25 AS builder
+FROM rancher/hardened-build-base:v1.25.10b1 AS builder
 
 ARG TAG=''
 ARG REPO=''

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM registry.suse.com/bci/golang:1.25 AS builder`
	`1`	`+FROM rancher/hardened-build-base:v1.25.10b1 AS builder`
`2`	`2`
`3`	`3`	`ARG TAG=''`
`4`	`4`	`ARG REPO=''`