build.Dockerfile: Install ca-certificates (#36486)

* make build Dockerfile visible & following naming convention

* install ca-certificates in build.Dockerfile

* re-link changelog entry

* add missing copyright headers

.changes/backported/ENHANCEMENTS-20250211-36486.yaml

@@ -2,4 +2,4 @@ kind: ENHANCEMENTS
 body: Include `ca-certificates` package in our official Docker image to help with certificate handling by downstream
 time: 2025-02-11T16:59:22.000+00:00
 custom:
-    Issue: "36471"
+    Issue: "36486"

.github/workflows/build.yml

@@ -183,7 +183,7 @@ jobs:
           bin_name: terraform
           target: default
           arch: ${{matrix.arch}}
-          dockerfile: .github/workflows/build-Dockerfile
+          dockerfile: build.Dockerfile
           smoke_test: .github/scripts/verify_docker v${{ env.version }}
           tags: |
             docker.io/hashicorp/${{env.repo}}:${{env.version}}

build.Dockerfile

@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 # This Dockerfile is not intended for general use, but is rather used to
 # produce our "light" release packages as part of our official release
 # pipeline.
@@ -41,7 +44,7 @@ LABEL org.opencontainers.image.title=${BIN_NAME} \
       org.opencontainers.image.vendor="HashiCorp" \
       org.opencontainers.image.licenses="BUSL-1.1"
 
-RUN apk add --no-cache git openssh
+RUN apk add --no-cache git openssh ca-certificates
 
 # Copy the license file as per Legal requirement
 COPY LICENSE "/usr/share/doc/${BIN_NAME}/LICENSE.txt"