Dockerfile

# Node needed to analyze JS/TS files
FROM node:18-slim AS node_base

FROM gcc:14

ARG SONAR_HOST_URL=https://isc-sonar.edu.hesge.ch

RUN apt update && apt install -y curl unzip build-essential make g++ clang git-core openssl libssl-dev && apt clean

# Download sonar tools
RUN mkdir -p /sonar && \
    curl -sSLo sonar-scanner.zip https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-5.0.1.3006-linux.zip && \
    unzip -o sonar-scanner.zip -d /sonar && \
    mv /sonar/sonar-scanner-5.0.1.3006-linux/* /sonar/ && \
    ln -s /sonar/bin/sonar-scanner /usr/local/bin/sonar-scanner && \
    curl --insecure -sSLo build-wrapper-linux-x86.zip  "$SONAR_HOST_URL/static/cpp/build-wrapper-linux-x86.zip" && \
    unzip -o build-wrapper-linux-x86.zip -d /tmp && \
    mv /tmp/build-wrapper-linux-x86/* /usr/local/bin/ && \
    rm build-wrapper-linux-x86.zip sonar-scanner.zip


COPY ./cacerts /tmp/cacerts
ENV SONAR_SCANNER_OPTS="-Djavax.net.ssl.trustStore=/tmp/cacerts"
RUN mkdir -p /usr/src && \
  useradd -m sonar && \
  chown sonar:sonar /usr/src && \
  chmod 744 /tmp/cacerts

USER sonar
WORKDIR /usr/src

COPY --from=node_base /usr/local/bin /usr/local/bin
COPY --from=node_base /usr/local/lib/node_modules/npm /usr/local/lib/node_modules/npm