From a1e79657e3be45cf968cf7a8865ebb6a5896f5e8 Mon Sep 17 00:00:00 2001
From: Kyle Conroy <kyle@sqlc.dev>
Date: Fri, 5 Jan 2024 10:04:14 -0800
Subject: [PATCH] fix(docker): Use distroless instead of scratch

By changing our base to distroless/base, we make sure that our image has
the correct SSL/TLS root certificates.
---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 3239552c7a..0153d7519f 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -13,7 +13,7 @@ ENV VERSION=$version
 RUN go run scripts/release.go -docker
 
 # STEP 2: Build a tiny image
-FROM scratch
+FROM gcr.io/distroless/base-debian12
 
 COPY --from=builder /workspace/sqlc /workspace/sqlc
 ENTRYPOINT ["/workspace/sqlc"]