Merge pull request #410 from snyk/fix/gar-stigs-migration

fix: move to gar/stigs images

Author: tibi-snyk

.circleci/config.yml

@@ -40,14 +40,6 @@ only_tags_filter: &only_tags_filter
       ignore: /.*/
 
 commands:
-  gcr_auth:
-    description: Auth GCR
-    steps:
-      - setup_remote_docker
-      - run:
-          name: GCR auth
-          command: echo $GCLOUD_GCR_BUILDER | docker login -u _json_key --password-stdin https://gcr.io/snyk-main
-
   setup_build_remote_docker:
     steps:
       - setup_remote_docker:
@@ -90,7 +82,8 @@ jobs:
     steps:
       - checkout:
           path: ~/vervet
-      - gcr_auth
+      - setup_build_remote_docker
+      - publish/auth-build
       - run:
           name: Build Docker Image
           command: make build-docker APP=vervet-underground

Dockerfile

@@ -31,7 +31,7 @@ RUN --mount=type=cache,target=/root/.cache/go-build \
 # we're not changing anything, only making it explicit.
 # Thanks to emulation, this will also run on ARM Macs.
 # Advised to move from distroless to the secure base image - https://docs.google.com/document/d/1I-vxsuHlmBlM8JHSDpvOmVMGeQQcbPgb8jH1ELEE9wo/edit#heading=h.1xke9mez8zov
-FROM --platform=amd64 gcr.io/snyk-main/ubuntu-20:2.4.0_202501141014
+FROM --platform=amd64 us-docker.pkg.dev/polaris-gcp-gar/polaris/ubuntu-20-golang-1-cis-stig-fips:3.3.0_202503041258
 
 COPY config.*.json /
 COPY --from=builder /go/bin/app /

Makefile

@@ -46,7 +46,7 @@ lint-docker:
 build-docker:
 	docker build \
 		-t ${APP}:${CIRCLE_WORKFLOW_ID} \
-		-t gcr.io/snyk-main/${APP}:${CIRCLE_SHA1} .
+		-t us-docker.pkg.dev/polaris-gcp-gar/polaris/${APP}:${CIRCLE_SHA1} .
 
 #----------------------------------------------------------------------------------
 #  Ignores the test cache and forces a full test suite execution