dependabot[bot]
4fb8b89d4e
Bumps golang from 1.25.12-alpine to 1.25.13-alpine. --- updated-dependencies: - dependency-name: golang dependency-version: 1.25.13-alpine dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Iryna Kulakova <52420926+IrynaKulakova@users.noreply.github.com>
53 lines
2.2 KiB
Docker
53 lines
2.2 KiB
Docker
FROM node:26-alpine@sha256:e88a35be04478413b7c71c455cd9865de9b9360e1f43456be5951032d7ac1a66 AS ui-build
|
|
WORKDIR /app
|
|
COPY ui/package*.json ./ui/
|
|
RUN cd ui && npm ci
|
|
COPY ui/ ./ui/
|
|
# Create output directory and build - vite outputs directly to pkg/github/ui_dist/
|
|
RUN mkdir -p ./pkg/github/ui_dist && \
|
|
cd ui && npm run build
|
|
|
|
FROM golang:1.25.13-alpine@sha256:1e0126852075c9c60731c8ba49088448b91f63e2aed97ca9d1a9791622a05946 AS build
|
|
ARG VERSION="dev"
|
|
|
|
# Set the working directory
|
|
WORKDIR /build
|
|
|
|
# Install git
|
|
RUN --mount=type=cache,target=/var/cache/apk \
|
|
apk add git
|
|
|
|
# Copy source code (including ui_dist placeholder)
|
|
COPY . .
|
|
|
|
# Copy built UI assets over the placeholder
|
|
COPY --from=ui-build /app/pkg/github/ui_dist/* ./pkg/github/ui_dist/
|
|
|
|
# Build the server
|
|
# OAuth credentials are injected via build secrets so they are not baked into image history; the values are public in practice but kept out of layers.
|
|
RUN --mount=type=cache,target=/go/pkg/mod \
|
|
--mount=type=cache,target=/root/.cache/go-build \
|
|
--mount=type=secret,id=oauth_client_id \
|
|
--mount=type=secret,id=oauth_client_secret \
|
|
export OAUTH_CLIENT_ID="$(cat /run/secrets/oauth_client_id 2>/dev/null || echo '')" && \
|
|
export OAUTH_CLIENT_SECRET="$(cat /run/secrets/oauth_client_secret 2>/dev/null || echo '')" && \
|
|
CGO_ENABLED=0 go build -ldflags="-s -w -X main.version=${VERSION} -X main.commit=$(git rev-parse HEAD) -X main.date=$(date -u +%Y-%m-%dT%H:%M:%SZ) -X github.com/github/github-mcp-server/internal/buildinfo.OAuthClientID=${OAUTH_CLIENT_ID} -X github.com/github/github-mcp-server/internal/buildinfo.OAuthClientSecret=${OAUTH_CLIENT_SECRET}" \
|
|
-o /bin/github-mcp-server ./cmd/github-mcp-server
|
|
|
|
# Make a stage to run the app
|
|
FROM gcr.io/distroless/base-debian12@sha256:76b3162a31477bca4a245b836c624f4c4a1a3705e99b9003907d992bec2c4bca
|
|
|
|
# Add required MCP server annotation
|
|
LABEL io.modelcontextprotocol.server.name="io.github.github/github-mcp-server"
|
|
|
|
# Set the working directory
|
|
WORKDIR /server
|
|
# Copy the binary from the build stage
|
|
COPY --from=build /bin/github-mcp-server .
|
|
# Expose the default port
|
|
EXPOSE 8082
|
|
# Set the entrypoint to the server binary
|
|
ENTRYPOINT ["/server/github-mcp-server"]
|
|
# Default arguments for ENTRYPOINT
|
|
CMD ["stdio"]
|