FROM amd64/golang:1.25.5@sha256:3a015269a07c7a8594aa134f1051fbf47ae09d04e2f16fd1b7774f50e06fe5b5 as modules WORKDIR /build ADD go.* /build RUN go mod download FROM modules as build ARG CI_COMMIT WORKDIR /build ENV CGO_ENABLED=0 ADD . /build RUN CGO_ENABLED=1 go test -mod=readonly -race -coverprofile=coverage.txt.tmp -covermode=atomic -coverpkg=$(go list ./... | tr '\n' , | sed 's/,$//') ./... RUN ["/bin/bash", "-c", "cat coverage.txt.tmp | grep -v testing.go | grep -v -f <(find . -type f | xargs grep -l 'Code generated by github.com/99designs/gqlgen, DO NOT EDIT') > coverage.txt"] RUN go tool cover -html=coverage.txt -o coverage.html RUN go tool cover -func=coverage.txt RUN rm coverage.txt.tmp RUN GOOS=linux GOARCH=amd64 go build \ -a -installsuffix cgo \ -mod=readonly \ -o /release/service \ -ldflags "-w -s -X main.buildVersion=${CI_COMMIT}" \ ./cmd/service/service.go FROM scratch as export COPY --from=build /build/coverage.txt / FROM node:24.13.0-alpine@sha256:931d7d57f8c1fd0e2179dbff7cc7da4c9dd100998bc2b32afc85142d8efbc213 ENV TZ Europe/Stockholm # Install wgc CLI globally for Cosmo Router composition RUN npm install -g wgc@latest # Copy timezone data and certificates COPY --from=build /usr/share/zoneinfo /usr/share/zoneinfo COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ # Copy the service binary COPY --from=build /release/service / CMD ["/service"]