Add slash at the end of COPY command to fix AVD-DS-0011

[vitorarins]

🤔 What's changed?

Added slash at the end of COPY command to fix AVD-DS-0011

⚡️ What's your motivation?

Avoid error messages when scanning for security issues

🏷️ What kind of change is this?

• 🐛 Bug fix (non-breaking change which fixes a defect)

📋 Checklist:

• I agree to respect and uphold the Cucumber Community Code of Conduct

[mpkorstanje]

Could you provide a bit more context? We're not publishing any docker images.

[vitorarins]

Could you provide a bit more context?

Certainly!

I use godog for a private project, which makes use of the cucumber/messages/go module. Also I vendor my dependencies with go mod vendor.

So when running a security tool like trivy, I am getting this error:

trivy fs --scanners vuln,misconfig --exit-code 1 --severity CRITICAL .
2024-05-22T07:22:56Z	INFO	Vulnerability scanning is enabled
2024-05-22T07:22:56Z	INFO	Misconfiguration scanning is enabled
2024-05-22T07:22:57Z	INFO	Number of language-specific files	num=1
2024-05-22T07:22:57Z	INFO	[gomod] Detecting vulnerabilities...
2024-05-22T07:22:57Z	INFO	Detected config files	num=3
vendor/github.com/cucumber/messages/go/v21/Dockerfile (dockerfile)
==================================================================
Tests: 6 (SUCCESSES: 5, FAILURES: 1, EXCEPTIONS: 0)
Failures: 1 (CRITICAL: 1)
CRITICAL: Slash is expected at the end of COPY command argument '.'
════════════════════════════════════════
When a COPY command has more than two arguments, the last one should end with a slash.
See https://avd.aquasec.com/misconfig/ds011
────────────────────────────────────────
 vendor/github.com/cucumber/messages/go/v21/Dockerfile:15
────────────────────────────────────────
  15 [ COPY --link go.mod go.sum .
────────────────────────────────────────
Command exited with non-zero status 1

We're not publishing any docker images.

Well, is it necessary to keep this Dockerfile then?

[mpkorstanje]

Superseded by #223.

[mpkorstanje]

Well, is it necessary to keep this Dockerfile then?

Looks like it isn't. Cheers!