# The existing offline tool runtime includes GCC and the C development libraries.
FROM localhost/devsecops/gitleaks:8.30.1 AS build
COPY src/main.c /src/main.c
RUN mkdir /out && gcc -static -O2 -Wall -Wextra -Werror /src/main.c -o /out/my-app && /out/my-app

FROM scratch
COPY --from=build /out/my-app /my-app
# Empty by default; used only by the documented negative acceptance test.
COPY fixtures/ /test-fixtures/
USER 10001:10001
ENTRYPOINT ["/my-app"]