Bagas Purwa Sentika 78fd4002fd feat(09-tooling-portable-setup-01): create Dockerfile with version-pinned tool installations
- FROM nikolaik/python-nodejs:python3.11-nodejs20 with deprecation comment
- ARGs for version pinning (terraform 1.15.6, helm 4.2.1, kubectl 1.36.1, pup 1.1.0)
- System dependencies: curl, ca-certificates, unzip, gnupg, wget
- AWS CLI v2 via official curl/unzip/install method
- Terraform via HashiCorp apt repo (version-pinned)
- kubectl via Google Kubernetes apt repo (NOT version-pinned)
- Helm via Buildkite apt repo (version-pinned)
- Datadog CLI (pup) via GitHub releases binary download
- All downloads over HTTPS with GPG key verification (T-09-01)
- No COPY . (T-09-02 mitigation)
- D-01 through D-03 referenced in comments
- --no-install-recommends and apt list cleanup
2026-06-15 23:18:47 +08:00
2026-06-14 02:10:46 +08:00
Description
No description provided
379 KiB
Languages
Shell 94.4%
Dockerfile 5.6%