Audit and refresh devcontainer install URLs

Agent-Logs-Url: https://github.com/cloudengine-labs/devops_os/sessions/5a7ec5cb-5911-4929-a875-d57261636b95

Co-authored-by: chefgs <7605658+chefgs@users.noreply.github.com>

Author: Copilot

.devcontainer/Dockerfile

@@ -30,6 +30,7 @@ ARG INSTALL_KUBESEAL=true
 ARG INSTALL_FLUX=true
 ARG FLUX_VERSION=2.1.2
 ARG INSTALL_KIND=true
+ARG KIND_VERSION=0.20.0
 ARG INSTALL_MINIKUBE=true
 ARG INSTALL_OPENSHIFT_CLI=false
 
@@ -42,8 +43,10 @@ ARG INSTALL_CMAKE=true
 
 # Code analysis tools
 ARG INSTALL_SONARQUBE=true
+ARG SONAR_SCANNER_VERSION=4.8.0.2856
 ARG INSTALL_CHECKSTYLE=true
 ARG INSTALL_PMD=true
+ARG PMD_VERSION=7.0.0-rc3
 ARG INSTALL_ESLINT=true
 ARG INSTALL_PYLINT=true
 
@@ -193,7 +196,7 @@ RUN if [ "$INSTALL_FLUX" = "true" ]; then \
 
 # Install KinD if requested
 RUN if [ "$INSTALL_KIND" = "true" ]; then \
-    curl -Lo /usr/local/bin/kind "https://kind.sigs.k8s.io/dl/v0.20.0/kind-$(uname)-amd64" \
+    curl -fsSLo /usr/local/bin/kind "https://github.com/kubernetes-sigs/kind/releases/download/v${KIND_VERSION}/kind-${TARGETOS}-${TARGETARCH}" \
     && chmod +x /usr/local/bin/kind; \
     fi
 
@@ -245,11 +248,12 @@ RUN if [ "$INSTALL_ANT" = "true" ]; then \
 
 # SonarQube Scanner
 RUN if [ "$INSTALL_SONARQUBE" = "true" ]; then \
-    mkdir -p /opt/sonar-scanner \
-    && curl -sSLo /opt/sonar-scanner-cli.zip https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-4.8.0.2856-linux.zip \
-    && unzip /opt/sonar-scanner-cli.zip -d /opt \
-    && mv /opt/sonar-scanner-* /opt/sonar-scanner \
-    && rm /opt/sonar-scanner-cli.zip \
+    curl -fsSLo /tmp/sonar-scanner-cli.zip "https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-${SONAR_SCANNER_VERSION}-linux.zip" \
+    && rm -rf /opt/sonar-scanner /tmp/sonar-scanner \
+    && mkdir -p /tmp/sonar-scanner \
+    && unzip /tmp/sonar-scanner-cli.zip -d /tmp/sonar-scanner \
+    && mv "/tmp/sonar-scanner/sonar-scanner-${SONAR_SCANNER_VERSION}-linux" /opt/sonar-scanner \
+    && rm -rf /tmp/sonar-scanner /tmp/sonar-scanner-cli.zip \
     && echo 'export PATH=$PATH:/opt/sonar-scanner/bin' >> /etc/bash.bashrc; \
     fi
 
@@ -264,7 +268,7 @@ RUN if [ "$INSTALL_CHECKSTYLE" = "true" ]; then \
 # PMD
 RUN if [ "$INSTALL_PMD" = "true" ]; then \
     mkdir -p /opt/pmd \
-    && curl -sSLo /opt/pmd.zip https://github.com/pmd/pmd/releases/download/pmd_releases%2F7.0.0-rc3/pmd-bin-7.0.0-rc3.zip \
+    && curl -fsSLo /opt/pmd.zip "https://github.com/pmd/pmd/releases/download/pmd_releases/${PMD_VERSION}/pmd-dist-${PMD_VERSION}-bin.zip" \
     && unzip /opt/pmd.zip -d /opt \
     && mv /opt/pmd-bin-* /opt/pmd \
     && rm /opt/pmd.zip \
@@ -308,8 +312,8 @@ RUN if [ "$INSTALL_PROMETHEUS" = "true" ]; then \
 
 # Grafana
 RUN if [ "$INSTALL_GRAFANA" = "true" ]; then \
-    wget -q -O - https://packages.grafana.com/gpg.key | gpg --dearmor | tee /usr/share/keyrings/grafana.gpg > /dev/null \
-    && echo "deb [signed-by=/usr/share/keyrings/grafana.gpg] https://packages.grafana.com/oss/deb stable main" | tee -a /etc/apt/sources.list.d/grafana.list \
+    wget -q -O - https://apt.grafana.com/gpg.key | gpg --dearmor | tee /usr/share/keyrings/grafana.gpg > /dev/null \
+    && echo "deb [signed-by=/usr/share/keyrings/grafana.gpg] https://apt.grafana.com stable main" | tee -a /etc/apt/sources.list.d/grafana.list \
     && apt-get update \
     && apt-get install -y grafana; \
     fi