docker-flutter-sdk/README.md

# Flutter SDK Docker Images

[![Docker Hub](https://img.shields.io/badge/Docker%20Hub-svrnty%2Fflutter--sdk-blue?logo=docker)](https://hub.docker.com/r/svrnty/flutter-sdk)
[![Git Repository](https://img.shields.io/badge/Git-Repository-orange?logo=gitea)](https://git.openharbor.io/svrnty/docker-flutter-sdk)
[![Docker Pulls](https://img.shields.io/docker/pulls/svrnty/flutter-sdk?logo=docker)](https://hub.docker.com/r/svrnty/flutter-sdk)
[![Docker Image Size (android)](https://img.shields.io/docker/image-size/svrnty/flutter-sdk/android-latest?label=android&logo=docker)](https://hub.docker.com/r/svrnty/flutter-sdk)
[![Docker Scout](https://img.shields.io/badge/Docker%20Scout-Verified-green?logo=docker)](https://scout.docker.com/image/svrnty/flutter-sdk)
[![SLSA 3](https://img.shields.io/badge/SLSA-Level%203-green?logo=slsa)](https://slsa.dev)
[![License](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)

Lightweight Flutter SDK images for CI/CD pipelines. Built on [Wolfi](https://wolfi.dev), a security-focused Linux distribution designed for containers.

## Images

| Variant | Use Case | Size |
|---------|----------|------|
| `svrnty/flutter-sdk:web-latest` | Web/WASM builds | ~800 MB |
| `svrnty/flutter-sdk:android-latest` | Android APK/AAB builds | ~1.7 GB |
| `svrnty/flutter-sdk:linux-latest` | Linux desktop builds | ~1.3 GB |

## Why Wolfi?

[Wolfi](https://wolfi.dev) is a lightweight Linux distribution built specifically for containers. It provides:

- **Minimal footprint** - Only essential packages, nothing extra
- **Daily security updates** - Patches applied quickly
- **Designed for containers** - No legacy cruft from traditional distros

## Features

- **Lightweight** - Optimized for fast CI/CD pulls
- **Secure** - Built on Wolfi with continuous vulnerability scanning
- **Multi-arch** - Supports both `linux/amd64` and `linux/arm64`
- **Non-root** - Runs as unprivileged user (UID 65532)
- **Supply chain security** - SBOM and SLSA provenance attestations included

## Usage

### Web

```bash
docker run --rm -v $(pwd):/app -w /app svrnty/flutter-sdk:web-latest \
  flutter build web
```

### Android

```bash
docker run --rm -v $(pwd):/app -w /app svrnty/flutter-sdk:android-latest \
  flutter build apk
```

### Linux Desktop

```bash
docker run --rm -v $(pwd):/app -w /app svrnty/flutter-sdk:linux-latest \
  flutter build linux
```

## CI/CD Examples

### GitHub Actions

```yaml
jobs:
  build:
    runs-on: ubuntu-latest
    container:
      image: svrnty/flutter-sdk:android-latest
    steps:
      - uses: actions/checkout@v4
      - run: flutter build apk --release
```

### GitLab CI

```yaml
build:
  image: svrnty/flutter-sdk:android-latest
  script:
    - flutter build apk --release
```

### Gitea Actions

```yaml
jobs:
  build:
    runs-on: ubuntu-latest
    container:
      image: svrnty/flutter-sdk:android-latest
    steps:
      - uses: actions/checkout@v3
      - run: flutter build apk --release
```

## Tags

- `<variant>-latest` - Latest stable Flutter release
- `<variant>-<version>` - Specific Flutter version (e.g., `android-3.38.9`)
- `<variant>-dev` - Pre-release testing

## Automatic Updates

Images are automatically rebuilt when:
- New Flutter stable versions are released
- Base image security updates are available

Every build is scanned and includes supply chain attestations (SBOM, SLSA provenance).

## License

MIT