(tooling-trusted-releases) 01/01: Refactor Dockerfile to streamline Apache RAT installation

[wa...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

wave pushed a commit to branch docker-checksum-apache-rat
in repository https://gitbox.apache.org/repos/asf/tooling-trusted-releases.git

commit f39c3c655cf6b72b9264e7cb182e0791893600d5
Author: Dave Fisher <da...@comcast.net>
AuthorDate: Mon Feb 23 10:31:00 2026 -0800

    Refactor Dockerfile to streamline Apache RAT installation
    
    Consolidate commands for downloading and extracting Apache RAT.
---
 Dockerfile.alpine | 21 ++++++++++-----------
 1 file changed, 10 insertions(+), 11 deletions(-)

diff --git a/Dockerfile.alpine b/Dockerfile.alpine
index 4fcacfb3..10487cf7 100644
--- a/Dockerfile.alpine
+++ b/Dockerfile.alpine
@@ -45,17 +45,16 @@ RUN apk update && \
 # install additional tools
 ENV RAT_VERSION=0.17
 
-RUN mkdir -p /opt/tools
-RUN mkdir -p /tmp/apache-rat
-WORKDIR /tmp/apache-rat
-# TODO: Check hash
-# TODO: This URL is not permanent, so we need to vendor this to pin it
-RUN curl -L https://dlcdn.apache.org/creadur/apache-rat-${RAT_VERSION}/apache-rat-${RAT_VERSION}-bin.tar.gz -o apache-rat.tar.gz
-RUN tar -xzf apache-rat.tar.gz
-RUN find apache-rat-${RAT_VERSION} -type f -name "*.jar" -exec cp {} . \;
-# Rename to match expected filename if needed
-RUN [ -f apache-rat-${RAT_VERSION}.jar ] || mv $(find . -maxdepth 1 -type f -name "apache-rat*.jar" | head -1) apache-rat-${RAT_VERSION}.jar
-RUN mv apache-rat-${RAT_VERSION}.jar /opt/tools
+RUN set -eux; \
+    mkdir -p /opt/tools /tmp/apache-rat; \
+    cd /tmp/apache-rat; \
+    curl -fsSLO https://dlcdn.apache.org/creadur/apache-rat-${RAT_VERSION}/apache-rat-${RAT_VERSION}-bin.tar.gz; \
+    curl -fsSLO https://downloads.apache.org/creadur/apache-rat-${RAT_VERSION}/apache-rat-${RAT_VERSION}-bin.tar.gz.sha512; \
+    sha512sum -c apache-rat-${RAT_VERSION}-bin.tar.gz.sha512; \
+    tar -xzf apache-rat-${RAT_VERSION}-bin.tar.gz; \
+    find apache-rat-${RAT_VERSION} -type f -name "*.jar" -exec cp {} . \; ; \
+    mv apache-rat-${RAT_VERSION}.jar /opt/tools; \
+    rm -rf /tmp/apache-rat
 
 # WORKDIR /var/run
 ENV SYFT_VERSION=1.38.2


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For additional commands, e-mail: commits-help@tooling.apache.org