feat: Fixed vulnerabilities

Author: amanstep

.github/workflows/reviewdog.yml

@@ -18,3 +18,4 @@ jobs:
           github_token: ${{ secrets.github_token }}
           locale: "US"
           pattern: "*.md"
+          filter_mode: nofilter

Dockerfile

@@ -1,19 +1,25 @@
-FROM debian:bullseye-slim@sha256:2f2307d7c75315ca7561e17a4e3aa95d58837f326954af08514044e8286e6d65
+FROM golang:1.23-alpine@sha256:9a425d78a8257fc92d41ad979d38cb54005bac3fdefbdadde868e004eccbb898
 
 ENV REVIEWDOG_VERSION=v0.20.3
 
-RUN apt-get update \
-    && apt-get install -y --no-install-recommends \
+RUN apk add --no-cache \
         ca-certificates \
         git \
         wget \
         curl \
-    && apt-get clean \
-    && rm -rf /var/lib/apt/lists/*
+        bash
+
+RUN git clone --depth 1 --branch ${REVIEWDOG_VERSION} https://github.com/reviewdog/reviewdog.git /reviewdog \
+    && cd /reviewdog \
+    && go mod edit -require=golang.org/x/crypto@v0.35.0 \
+    && go mod tidy \
+    && CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo -o reviewdog ./cmd/reviewdog \
+    && mv reviewdog /usr/local/bin/reviewdog \
+    && cd / \
+    && rm -rf /reviewdog /go/pkg /root/.cache /root/go
 
-RUN wget -O - -q https://raw.githubusercontent.com/reviewdog/reviewdog/fd59714416d6d9a1c0692d872e38e7f8448df4fc/install.sh| sh -s -- -b /usr/local/bin/ ${REVIEWDOG_VERSION}
 RUN wget -O - -q https://raw.githubusercontent.com/golangci/misspell/master/install-misspell.sh | sh -s -- -b /usr/local/bin/
 
 COPY entrypoint.sh /entrypoint.sh
 
-ENTRYPOINT ["/entrypoint.sh"]
+ENTRYPOINT ["/entrypoint.sh"]