force 0o555 mode for executables added to oci images

sourcegraph · Feb 14, 2024 · 825e834 · 825e834
1 parent 39983ce
commit 825e834
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/cmd/server/macro.bzl b/cmd/server/macro.bzl
@@ -18,6 +18,7 @@ def container_dependencies(targets):
             name = "tar_{}".format(name),
             srcs = [target],
             remap_paths = {"/{}".format(name): "/usr/local/bin/{}".format(name)},
+            modes = {"/usr/local/bin/{}".format(name): "0555"},
         )
 
 def dependencies_tars(targets):