FROM alpine:latest

ARG USER="user"

RUN \
    echo "@testing https://dl-cdn.alpinelinux.org/alpine/edge/testing" >> /etc/apk/repositories && \
    apk add --no-cache kubectl openssl gpg gpg-agent bash trivy@testing curl helm && \
    addgroup $USER && \
    adduser -G $USER -D $USER

COPY decrypt-secrets.sh /usr/local/bin/

USER $USER
WORKDIR /home/$USER