anchor.diff:      tar -xvf helm.tgz --strip-components=1
   
   # assemble final container
  -FROM alpine
  +FROM alpine:3.12
   RUN apk add --no-cache coreutils diffutils less git openssh-client
   COPY tk /usr/local/bin/tk
   COPY --from=kubectl /usr/local/bin/kubectl /usr/local/bin/kubectl
  
positive.code:     chmod +x /usr/local/bin/kubectl
  
  # build jsonnet-bundler
  FROM golang:alpine as jb
  WORKDIR /tmp
  RUN apk add --no-cache git make bash &&\
      git clone https://github.com/jsonnet-bundler/jsonnet-bundler &&\
  
negative.code:     make static &&\
      mv _output/jb /usr/local/bin/jb
  
  FROM golang:alpine3.12 as helm
  WORKDIR /tmp/helm
  RUN apk add --no-cache jq curl
  RUN export TAG=$(curl --silent "https://api.github.com/repos/helm/helm/releases/latest" | jq -r .tag_name) &&\
  