FROM golang:1.25-alpine AS builder
WORKDIR /app
COPY main.go webhook.go config.go .
RUN go mod init varde && \
    go mod tidy && \
    CGO_ENABLED=0 GOOS=linux go build -o server main.go webhook.go config.go

FROM scratch
COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
COPY --from=builder /app/server /server
CMD ["/server"]