Adding meaningful repository to be scanned and removing embedded GOARCH/GOOS platform when building images.

Author: andream16

new-components/Dockerfile

@@ -17,8 +17,6 @@ RUN CGO_CPPFLAGS="-D_FORTIFY_SOURCE=2 -fstack-protector-all" \
     # Makes memory exploitation harder.
     # Add a small overhead at compile time.
     GOFLAGS="-buildmode=pie" \
-    GOOS="linux" \
-    GOARCH="amd64" \
       go build -ldflags "-s -w" -trimpath -o app ${COMPONENT_BINARY_SOURCE_PATH}
 
 # Create a workspace to clone repos to.

new-components/scanners/gosec/component.yaml

@@ -4,7 +4,7 @@ type: scanner
 parameters:
   - name: repo_name
     type: string
-    value: tree
+    value: go-dvwa
 steps:
   - name: scanner
     image: docker.io/securego/gosec:2.15.0

new-components/targets/git-clone/Makefile

@@ -23,8 +23,6 @@ build-target:
 	# Makes memory exploitation harder.
     # Add a small overhead at compile time.
 	GOFLAGS="-buildmode=pie" \
-	GOOS="linux" \
-	GOARCH="amd64" \
 		go build -ldflags "-s -w" -trimpath -o target ./cmd/git-clone/main.go
 
 image:

new-components/targets/git-clone/component.yaml

@@ -4,7 +4,7 @@ type: target
 parameters:
   - name: repo_url
     type: string
-    value: https://github.com/andream16/tree.git
+    value: https://github.com/sqreen/go-dvwa.git
   - name: reference
     type: string
     value: master