anchor.diff:      wget ca-certificates
   
   RUN set -eux; \
  -    \
       case $(uname -m) in \
           x86_64) export NODEJS_TAR=node-v${NODEJS_VERSION}-linux-x64.tar.gz;; \
           aarch64) export NODEJS_TAR=node-v${NODEJS_VERSION}-linux-arm64.tar.gz;; \
           *) echo "unsupported architecture"; exit 1 ;; \
       esac; \
  -    \
       wget -O /tmp/${NODEJS_TAR} https://nodejs.org/download/release/v${NODEJS_VERSION}/${NODEJS_TAR}; \
       tar -xzf /tmp/${NODEJS_TAR} --strip-components=1 -C /usr/local
   
  
positive.code: RUN mv /tmp/helm3/linux-${TARGETARCH}/helm ${OUTDIR}/usr/bin/helm
  
  # yq doesn't support go modules, so install the binary instead
  ARG TARGETARCH
  ADD https://github.com/mikefarah/yq/releases/download/${YQ_VERSION}/yq_linux_${TARGETARCH} /tmp
  RUN mv /tmp/yq_linux_${TARGETARCH} ${OUTDIR}/usr/bin/yq
  RUN chmod 555 ${OUTDIR}/usr/bin/yq
  
  # Kubectl
  ARG TARGETARCH
  ADD https://storage.googleapis.com/kubernetes-release/release/v${KUBECTL_VERSION}/bin/linux/${TARGETARCH}/kubectl ${OUTDIR}/usr/bin/kubectl
  RUN chmod 555 ${OUTDIR}/usr/bin/kubectl
  
  # GCR docker credential helper
  ARG TARGETARCH
  ADD https://github.com/GoogleCloudPlatform/docker-credential-gcr/releases/download/v${GCR_AUTH_VERSION}/docker-credential-gcr_linux_${TARGETARCH}-${GCR_AUTH_VERSION}.tar.gz /tmp
  RUN tar -xzf /tmp/docker-credential-gcr_linux_${TARGETARCH}-${GCR_AUTH_VERSION}.tar.gz -C /tmp
  RUN mv /tmp/docker-credential-gcr ${OUTDIR}/usr/bin
  
  # Install su-exec which is a tool that operates like sudo without the overhead
  ADD https://github.com/ncopa/su-exec/archive/v${SU_EXEC_VERSION}.tar.gz /tmp
  
negative.code: 
  # Install protoc
  RUN set -eux; \
      PROTOC_ZIP="protoc-${PROTOC_VERSION}-linux-$(uname -m).zip"; \
      wget -O "/tmp/${PROTOC_ZIP}" "https://github.com/protocolbuffers/protobuf/releases/download/v${PROTOC_VERSION}/${PROTOC_ZIP}"; \
      unzip "/tmp/${PROTOC_ZIP}"; \
      mv /tmp/bin/protoc ${OUTDIR}/usr/bin
  
  # Install gh
  ADD https://github.com/cli/cli/releases/download/v${GH_VERSION}/gh_${GH_VERSION}_linux_${TARGETARCH}.deb /tmp/
  RUN dpkg -i /tmp/gh_${GH_VERSION}_linux_${TARGETARCH}.deb
  RUN mv /usr/bin/gh ${OUTDIR}/usr/bin
  