3.16.3

Dockerfile

@@ -15,10 +15,15 @@ RUN set -xo pipefail; apk add --no-cache curl gnupg &&\
   tar -C /dest -xvzf alpine-minirootfs-${VERSION}-${ALPINE_ARCH}.tar.gz &&\
   sed -i "s#http://dl-cdn.alpinelinux.org/alpine/v${ALPINE_SERIES}#${ALPINE_MIRROR}#g" /dest/etc/apk/repositories
 
+ADD scan-deps.sh /bin/scan-deps
+
 FROM scratch
 ARG VERSION
 ARG DATE
 COPY --from=build /dest /
-RUN apk add --no-cache ca-certificates curl
+RUN set -xe;\
+  apk add --no-cache ca-certificates curl &&\
+  apk upgrade -a &&\
+  rm -rf /var/cache/apk/*
 CMD ["/bin/sh"]
 LABEL version.alpine=$VERSION build.date=$DATE

Jenkinsfile

@@ -1,4 +1,4 @@
-version = "3.16.2"
+version = "3.16.3"
 project = "alpine"
 repo = "zknt"
 registry = "reg.zknt.org"

build.yaml

@@ -1,5 +1,5 @@
 ---
-version: 3.16.2
+version: 3.16.3
 project: alpine
 additional_tags:
   - 3.16

scan-deps.sh

@@ -0,0 +1,2 @@
+#!/bin/sh
+scanelf --needed --nobanner --format '%n#p' --recursive $@ | tr ',' '\n' | sort -u | awk 'system("[ -e /usr/local/lib/" $1 " ]") == 0 { next } { print "so:" $1 }'