tech

The `ADD` instruction can download files from URLs and handle verification and permissions in one step:

```dockerfile
ADD --checksum=sha256:1daceab1a7613603072db34d406659f0865623a4f137637440764cb9aa31236c \
    --chmod=500 \
    --chown=1000:1000 \
    https://github.com/CycloneDX/cyclonedx-cli/releases/download/v0.29.1/cyclonedx-linux-x64 \
    /usr/local/bin/cyclonedx
```

This downloads the binary, verifies the SHA256 checksum, sets permissions to 500, and assigns ownership to uid:gid 1000:1000.

No need for `RUN curl && chmod && chown` chains. The `--checksum` flag ensures the build fails if the file is modified or corrupted.