install trivy from arch

Author: anthony-nhs

Makefile

@@ -12,7 +12,7 @@ guard-%:
 
 .PHONY: install install-python install-node install-hooks build-base-image build-node-24-image build-node-24-python-3-10-image build-node-24-python-3-12-image build-node-24-python-3-13-image build-node-24-python-3-14-image \
 	build-eps-storage-terraform-image build-fhir-facade-image build-node-24-python-3-14-golang-1-24-image build-node-24-python-3-14-java-24-image \
-	build-regression-tests-image build-all build-image build-githubactions-image scan-image scan-image-json shell-image lint test lint-githubactions lint-githubaction-scripts github-login clean
+	build-regression-tests-image build-all build-image build-githubactions-image scan-image scan-image-json shell-image lint test lint-githubactions lint-githubaction-scripts clean
 install: install-python install-node install-hooks
 
 install-python:

src/base/.devcontainer/Dockerfile

@@ -1,12 +1,7 @@
-FROM golang:1.26.1-bookworm AS build
+FROM archlinux:latest AS build
 ARG TARGETARCH
-RUN apt-get update && apt-get install -y \
-    jq \
-    && apt-get clean \
-    && rm -rf /var/lib/apt/lists/*
-COPY scripts/install_cosign.sh /tmp/install_cosign.sh
+RUN pacman -Sy --noconfirm cosign bash curl jq
 COPY scripts/install_trivy.sh /tmp/install_trivy.sh
-RUN INSTALL_DIR=/usr/local/bin /tmp/install_cosign.sh
 RUN case "${TARGETARCH}" in \
         x86_64|amd64) TRIVY_ARCH=64bit ;; \
         aarch64|arm64) TRIVY_ARCH=ARM64 ;; \

src/base/.devcontainer/Dockerfile.trivy.amd64

@@ -1,11 +1,7 @@
-FROM golang:1.26.1-bookworm AS build
-RUN apt-get update && apt-get install -y \
-    jq \
-    && apt-get clean \
-    && rm -rf /var/lib/apt/lists/*
-COPY src/base/.devcontainer/scripts/install_cosign.sh /tmp/install_cosign.sh
-COPY src/base/.devcontainer/scripts/install_trivy.sh /tmp/install_trivy.sh
-RUN INSTALL_DIR=/usr/local/bin /tmp/install_cosign.sh
+FROM archlinux:latest AS build
+ARG TARGETARCH
+RUN pacman -Sy --noconfirm cosign bash curl jq
+COPY scripts/install_trivy.sh /tmp/install_trivy.sh
 RUN INSTALL_DIR=/tmp/trivy/ ARCH=64bit /tmp/install_trivy.sh
 
 FROM scratch

src/base/.devcontainer/Dockerfile.trivy.arm64

@@ -1,11 +1,7 @@
-FROM golang:1.26.1-bookworm AS build
-RUN apt-get update && apt-get install -y \
-    jq \
-    && apt-get clean \
-    && rm -rf /var/lib/apt/lists/*
-COPY src/base/.devcontainer/scripts/install_cosign.sh /tmp/install_cosign.sh
-COPY src/base/.devcontainer/scripts/install_trivy.sh /tmp/install_trivy.sh
-RUN INSTALL_DIR=/usr/local/bin /tmp/install_cosign.sh
+FROM archlinux:latest AS build
+ARG TARGETARCH
+RUN pacman -Sy --noconfirm cosign bash curl jq
+COPY scripts/install_trivy.sh /tmp/install_trivy.sh
 RUN INSTALL_DIR=/tmp/trivy/ ARCH=ARM64 /tmp/install_trivy.sh
 
 FROM scratch