From 75ef031ff2124465f03f09988788c3f9e92c8a20 Mon Sep 17 00:00:00 2001
From: Hymmel <collinbuchkamer@gmail.com>
Date: Fri, 10 Oct 2025 15:40:55 +0200
Subject: [PATCH] j

---
 Dockerfile | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index af09e01..93f56d4 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -11,14 +11,17 @@ ENV PATH=${SBT_HOME}/bin:${PATH}
 # Install required tools and the specific version of SBT
 # The .tgz for 0.13.11 is missing from GitHub releases. We'll install it manually.
 RUN apt-get update && \
-    apt-get install -y curl && \
+    # Install certificates for HTTPS, curl to download, and unzip to verify
+    apt-get install -y ca-certificates curl unzip && \
     mkdir -p "${SBT_HOME}/bin" && \
     curl -L -o "${SBT_HOME}/bin/sbt-launch.jar" "https://repo1.maven.org/maven2/org/scala-sbt/sbt-launch/${SBT_VERSION}/sbt-launch-${SBT_VERSION}.jar" && \
+    # Verify the downloaded JAR is valid
+    unzip -t "${SBT_HOME}/bin/sbt-launch.jar" && \
     echo '#!/bin/sh' > "${SBT_HOME}/bin/sbt" && \
     echo 'SBT_OPTS="-Xms512M -Xmx1536M -Xss1M -XX:+CMSClassUnloadingEnabled -XX:MaxPermSize=256M"' >> "${SBT_HOME}/bin/sbt" && \
     echo 'java $SBT_OPTS -jar `dirname $0`/sbt-launch.jar "$@"' >> "${SBT_HOME}/bin/sbt" && \
     chmod 0755 "${SBT_HOME}/bin/sbt" && \
-    apt-get purge -y --auto-remove curl && \
+    apt-get purge -y --auto-remove curl unzip && \
     rm -rf /var/lib/apt/lists/*
 
 WORKDIR /app