diff --git a/containers/Dockerfile b/containers/Dockerfile index 4b3c84d2..631bb739 100644 --- a/containers/Dockerfile +++ b/containers/Dockerfile @@ -162,6 +162,7 @@ USER root ARG TRUFFLEHOG_VERSION=3.95.9 RUN curl -sSfL https://raw.githubusercontent.com/trufflesecurity/trufflehog/main/scripts/install.sh | sh -s -- -b /home/pentester/.local/bin "v${TRUFFLEHOG_VERSION}" && \ chown -R pentester:pentester /home/pentester/.local +ARG GITLEAKS_VERSION=8.30.1 RUN set -eux; \ ARCH="$(uname -m)"; \ case "$ARCH" in \ @@ -169,8 +170,7 @@ RUN set -eux; \ aarch64|arm64) GITLEAKS_ARCH="arm64" ;; \ *) echo "Unsupported architecture: $ARCH" >&2; exit 1 ;; \ esac; \ - TAG="$(curl -fsSL https://api.github.com/repos/gitleaks/gitleaks/releases/latest | jq -r .tag_name)"; \ - curl -fsSL "https://github.com/gitleaks/gitleaks/releases/download/${TAG}/gitleaks_${TAG#v}_linux_${GITLEAKS_ARCH}.tar.gz" -o /tmp/gitleaks.tgz; \ + curl -fsSL "https://github.com/gitleaks/gitleaks/releases/download/v${GITLEAKS_VERSION}/gitleaks_${GITLEAKS_VERSION}_linux_${GITLEAKS_ARCH}.tar.gz" -o /tmp/gitleaks.tgz; \ tar -xzf /tmp/gitleaks.tgz -C /tmp; \ install -m 0755 /tmp/gitleaks /usr/local/bin/gitleaks; \ rm -f /tmp/gitleaks /tmp/gitleaks.tgz