bpai-tools (sha256:dab6e5daabc9e267aad1cd61e70c8c2ca34528f4a77e412879641675e901b597)

Published 2026-10-04 20:38:40 +00:00 by bot_global_image_manager

Pull the image from the command line:

docker pull git.basepeak.dev/basepeak-ai/bpai-tools@sha256:dab6e5daabc9e267aad1cd61e70c8c2ca34528f4a77e412879641675e901b597

Digest

sha256:dab6e5daabc9e267aad1cd61e70c8c2ca34528f4a77e412879641675e901b597

For more information on the Container registry, see the documentation.

apko

RUN /bin/sh -c apk add --no-cache go make git build-base bash nodejs npm curl python-3.13 py3.13-pip icu-libs dotnet-10-runtime # buildkit

RUN /bin/sh -c npm install -g pnpm@11.5.3 && pnpm --version # buildkit

ENV GOPRIVATE=git.basepeak.dev

ENV GONOSUMCHECK=git.basepeak.dev/*

RUN /bin/sh -c apk add --no-cache tesseract tesseract-osd && tesseract --list-langs # buildkit

ARG PUBLIC_TOOLS_REF=e753c74d429cf06f24d42ce493828b7e2adecb4c

RUN |1 PUBLIC_TOOLS_REF=e753c74d429cf06f24d42ce493828b7e2adecb4c /bin/sh -c set -eux; echo "${PUBLIC_TOOLS_REF}" | grep -Eq '^[0-9a-f]{40}$' || { echo "PUBLIC_TOOLS_REF must be a full 40-character commit sha, got: ${PUBLIC_TOOLS_REF}"; exit 1; }; git clone --filter=blob:none https://git.basepeak.dev/public/bpai-tools.git /bpai-tools/public-tools; git -C /bpai-tools/public-tools checkout --detach "${PUBLIC_TOOLS_REF}"; test "$(git -C /bpai-tools/public-tools rev-parse HEAD)" = "${PUBLIC_TOOLS_REF}"; git -C /bpai-tools/public-tools --no-pager log -1 --format='public-tools pinned at %H (%cs)' # buildkit

WORKDIR /bpai-tools/tools

COPY . /bpai-tools/tools # buildkit

RUN |1 PUBLIC_TOOLS_REF=e753c74d429cf06f24d42ce493828b7e2adecb4c /bin/sh -c if [ -s /run/secrets/forgejo_token ]; then export GIT_CONFIG_COUNT=1; export GIT_CONFIG_KEY_0="url.https://oauth2:$(cat /run/secrets/forgejo_token)@git.basepeak.dev/.insteadOf"; export GIT_CONFIG_VALUE_0="https://git.basepeak.dev/"; fi && UV_LINK_MODE=copy BIN_DIR=/bin make package-tools # buildkit

RUN |1 PUBLIC_TOOLS_REF=e753c74d429cf06f24d42ce493828b7e2adecb4c /bin/sh -c set -eux; grep -q 'public/bpai-tools' /bpai-tools/.envrc.tools.tools; /bpai-tools/tools/scripts/check-categories.sh /bpai-tools/public-tools; /bpai-tools/venv/bin/python /bpai-tools/public-tools/scripts/check-closure.py /bpai-tools/public-tools/fim-xdatenfelder/vendor fimportal --import fimportal.json_schema --import fimportal.xrepository --import fimportal.xdatenfelder.reports # buildkit

ARG OFFICECLI_VERSION=v1.0.111

ARG TARGETARCH=amd64

RUN |3 PUBLIC_TOOLS_REF=e753c74d429cf06f24d42ce493828b7e2adecb4c OFFICECLI_VERSION=v1.0.111 TARGETARCH=amd64 /bin/sh -c set -eux; case "$TARGETARCH" in amd64) asset=officecli-linux-x64 ;; arm64) asset=officecli-linux-arm64 ;; *) echo "unsupported arch: $TARGETARCH"; exit 1 ;; esac; cd /bpai-tools/tools/office; mkdir -p bin; curl -fsSL -o bin/officecli "https://github.com/iOfficeAI/OfficeCLI/releases/download/${OFFICECLI_VERSION}/${asset}"; grep " ${asset}\$" SHA256SUMS | awk '{print $1" bin/officecli"}' | sha256sum -c -; chmod +x bin/officecli; bin/officecli --version # buildkit

ARG PANDOC_VERSION=3.10

RUN |4 PUBLIC_TOOLS_REF=e753c74d429cf06f24d42ce493828b7e2adecb4c OFFICECLI_VERSION=v1.0.111 TARGETARCH=amd64 PANDOC_VERSION=3.10 /bin/sh -c set -eux; case "$TARGETARCH" in amd64) asset=pandoc-${PANDOC_VERSION}-linux-amd64.tar.gz ;; arm64) asset=pandoc-${PANDOC_VERSION}-linux-arm64.tar.gz ;; *) echo "unsupported arch: $TARGETARCH"; exit 1 ;; esac; cd /bpai-tools/tools/file-converter; mkdir -p bin; curl -fsSL -o "/tmp/${asset}" "https://github.com/jgm/pandoc/releases/download/${PANDOC_VERSION}/${asset}"; grep " ${asset}\$" SHA256SUMS | awk '{print $1" /tmp/"$2}' | sha256sum -c -; tar -xzf "/tmp/${asset}" -C /tmp; cp "/tmp/pandoc-${PANDOC_VERSION}/bin/pandoc" bin/pandoc; chmod +x bin/pandoc; rm -rf "/tmp/${asset}" "/tmp/pandoc-${PANDOC_VERSION}"; bin/pandoc --version | head -1 # buildkit

RUN |4 PUBLIC_TOOLS_REF=e753c74d429cf06f24d42ce493828b7e2adecb4c OFFICECLI_VERSION=v1.0.111 TARGETARCH=amd64 PANDOC_VERSION=3.10 /bin/sh -c set -eu; found=""; if [ -s /run/secrets/forgejo_token ]; then tok="$(cat /run/secrets/forgejo_token)"; found="$(grep -rlF "$tok" /root /etc /home /bpai-tools 2>/dev/null || true)"; fi; if [ -n "$found" ]; then echo "FAIL: the build secret is readable in this image:"; echo "$found"; exit 1; fi; extra="$(find /bpai-tools -path '*/.git/config' -exec grep -l 'extraheader' {} + 2>/dev/null || true)"; if [ -n "$extra" ]; then echo "FAIL: a checkout credential is present in a shipped .git/config:"; echo "$extra"; exit 1; fi; echo 'no credential readable in the tools image' # buildkit

Key	Value
dev.chainguard.image.title	wolfi-base
dev.chainguard.package.main
org.opencontainers.image.authors	Chainguard Team https://www.chainguard.dev/
org.opencontainers.image.created	2026-10-02T17:32:56Z
org.opencontainers.image.source	https://github.com/chainguard-images/images/tree/main/images/wolfi-base
org.opencontainers.image.title	wolfi-base
org.opencontainers.image.url	https://images.chainguard.dev/directory/image/wolfi-base/overview
org.opencontainers.image.vendor	Chainguard

Details

Container

2026-10-04 20:38:40 +00:00

OCI / Docker

linux/amd64

Chainguard Team https://www.chainguard.dev/

Project website

Repository website

1.3 GiB

Versions (28) View all

latest

2026-10-19

20261019.04

2026-10-19

20261019.02

2026-10-18

20261019.01

2026-10-18

buildcache

2026-10-18

bpai-tools (sha256:dab6e5daabc9e267aad1cd61e70c8c2ca34528f4a77e412879641675e901b597)

Installation

Image layers

Labels