build: more SELinux labels for Docker volumes (#6061)

Ref #6054

Signed-off-by: Zoran Regvart <zoran@regvart.com>
Co-authored-by: Johan Fylling <johan.dev@fylling.se>

Makefile

@@ -142,15 +142,15 @@ wasm-sdk-e2e-test: generate
 .PHONY: check
 check:
 ifeq ($(DOCKER_RUNNING), 1)
-	docker run --rm -v $(shell pwd):/app -w /app golangci/golangci-lint:${GOLANGCI_LINT_VERSION} golangci-lint run -v
+	docker run --rm -v $(shell pwd):/app:ro,Z -w /app golangci/golangci-lint:${GOLANGCI_LINT_VERSION} golangci-lint run -v
 else
 	@echo "Docker not installed or running. Skipping golangci run."
 endif
 
 .PHONY: fmt
 fmt:
 ifeq ($(DOCKER_RUNNING), 1)
-	docker run --rm -v $(shell pwd):/app -w /app golangci/golangci-lint:${GOLANGCI_LINT_VERSION} golangci-lint run -v --fix
+	docker run --rm -v $(shell pwd):/app:Z -w /app golangci/golangci-lint:${GOLANGCI_LINT_VERSION} golangci-lint run -v --fix
 else
 	@echo "Docker not installed or running. Skipping golangci run."
 endif

build/run-wasm-rego-tests.sh

@@ -46,7 +46,7 @@ function generate_testcases {
         --name $TESTGEN_CONTAINER_NAME \
         -u $(id -u):$(id -g) \
         -v $PWD/.go/bin:/go/bin:Z \
-        -v $PWD:/src:Z \
+        -v $PWD:/src:z \
         -v $ASSETS:/assets:Z \
         -e GOCACHE=/src/.go/cache \
         -w /src \
@@ -65,7 +65,7 @@ function run_testcases {
     docker run \
         --rm \
         --name $TESTRUN_CONTAINER_NAME \
-        --volumes-from $TESTGEN_CONTAINER_NAME \
+        --volumes-from $TESTGEN_CONTAINER_NAME:z \
         -e VERBOSE=$VERBOSE \
         -w /scratch \
         node:14 \