# Kaniko v1.23.2 (the last release of the original Google project), pinned by digest so the
# build tool can never change underneath a workflow. The -debug variant includes a busybox
# shell, which the entrypoint needs for the credential setup.
FROM gcr.io/kaniko-project/executor@sha256:c3109d5926a997b100c4343944e06c6b30a6804b2f9abe0994d3de6ef92b028e

# Kept under /kaniko: Kaniko never overwrites that directory while it unpacks the base image.
COPY entrypoint.sh /kaniko/scotty-git-entrypoint.sh

ENTRYPOINT ["/busybox/sh", "/kaniko/scotty-git-entrypoint.sh"]