refactor Dockerfile to install semgrep and gitleaks

Signed-off-by: Rafi <refaei.shikho@hotmail.com>

Author: refoo0

Dockerfile.scanner

@@ -3,26 +3,39 @@ FROM golang:1.24.0 AS golang-builder
 # set the working directory
 WORKDIR /app
 
-# like linux/amd64
 ARG TARGETPLATFORM
 
-COPY install_devguard_scanner_deps.sh .
+ENV CRANE_VERSION=v0.19.1
+ENV OS=Linux
+ENV ARCH=x86_64
 
-RUN ./install_devguard_scanner_deps.sh ${TARGETPLATFORM}
+
+
+RUN curl -sL "https://github.com/google/go-containerregistry/releases/download/${CRANE_VERSION}/go-containerregistry_${OS}_${ARCH}.tar.gz" > go-containerregistry.tar.gz && \
+    tar -zxvf go-containerregistry.tar.gz -C /usr/local/bin/ crane
+
+RUN curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin v0.58.1
+
+
+RUN curl -O -L "https://github.com/sigstore/cosign/releases/latest/download/cosign-linux-amd64" && mv cosign-linux-amd64 /usr/local/bin/cosign && chmod +x /usr/local/bin/cosign
+
+RUN curl -sL "https://github.com/semgrep/semgrep/archive/refs/tags/v1.117.0.tar.gz" > semgrep.tar.gz && \
+    tar -zxvf semgrep.tar.gz -C /usr/local/bin/ semgrep
 
 COPY . .
 
 # build the scanner
 RUN CGO_ENABLED=0 make devguard-scanner
 # ----------------------
 # create final image with node:alpine
-FROM alpine:3.20.2@sha256:0a4eaa0eecf5f8c050e5bba433f58c052be7587ee8af3e8b3910ef9ab5fbe9f5
+FROM zricethezav/gitleaks:v8.24.2@sha256:b5918eb91b8d2473cec722f066abb4352e4ffdc4ec9f4283ec143aba9ec9ebc4
 
 RUN apk add --no-cache git
 
 COPY --from=golang-builder /app/devguard-scanner /usr/local/bin/devguard-scanner
 COPY --from=golang-builder /usr/local/bin/trivy /usr/local/bin/trivy
 COPY --from=golang-builder /usr/local/bin/cosign /usr/local/bin/cosign
 COPY --from=golang-builder /usr/local/bin/crane /usr/local/bin/crane
+COPY --from=golang-builder /usr/local/bin/semgrep /usr/local/bin/semgrep
 
 ENTRYPOINT [""]