Switch from alpine to distroless, add -extldflags static

.goreleaser.yml

@@ -34,7 +34,7 @@ builds:
     - goos: freebsd
       goarch: "386"
     ldflags:
-      - -s -w -X github.com/DopplerHQ/cli/pkg/version.ProgramVersion=v{{.Version}}
+      - -extldflags "-static" -s -w -X github.com/DopplerHQ/cli/pkg/version.ProgramVersion=v{{.Version}}
 
 archives:
 -
@@ -105,7 +105,7 @@ changelog:
     - Merge branch
 
 dockers:
-  - dockerfile: docker/alpine
+  - dockerfile: docker/Dockerfile
     goos: linux
     goarch: amd64
     ids:

Makefile

@@ -1,7 +1,7 @@
 .PHONY: build release test
 
 build:
-	go build -o doppler -ldflags="-X github.com/DopplerHQ/cli/pkg/version.ProgramVersion=dev-$(shell git rev-parse --abbrev-ref HEAD)-$(shell git rev-parse --short HEAD)" main.go
+	GGO_ENABLED=0 go build -o doppler -ldflags="-extldflags "-static" -X github.com/DopplerHQ/cli/pkg/version.ProgramVersion=dev-$(shell git rev-parse --abbrev-ref HEAD)-$(shell git rev-parse --short HEAD)" main.go
 
 test:
 	go test ./pkg/... -v

docker/Dockerfile

@@ -0,0 +1,11 @@
+FROM debian:12-slim as build
+RUN apt-get update \
+    && apt-get install -y \
+    tini \
+    && rm -rf /var/lib/apt/lists/*
+
+FROM gcr.io/distroless/static-debian12:latest-amd64
+COPY --from=build /usr/bin/tini-static /usr/bin/tini-static
+
+COPY doppler /bin/doppler
+ENTRYPOINT ["/usr/bin/tini-static", "--", "/bin/doppler"]