diff --git a/charts/cert-manager-webhook-gandi/Dockerfile b/charts/cert-manager-webhook-gandi/Dockerfile
new file mode 100644
index 0000000..155ed76
--- /dev/null
+++ b/charts/cert-manager-webhook-gandi/Dockerfile
@@ -0,0 +1,23 @@
+# syntax=docker/dockerfile:1.3
+ARG GO_VERSION
+FROM --platform=${TARGETPLATFORM} golang:${GO_VERSION}-alpine AS base
+
+WORKDIR /go/src/cert-manager-webhook-gandi
+COPY go.* .
+
+RUN --mount=type=cache,target=/go/pkg/mod \
+    apk add --no-cache git ca-certificates && \
+    go mod download
+
+FROM base AS build
+ARG TARGETOS
+ARG TARGETARCH
+
+RUN --mount=readonly,target=. --mount=type=cache,target=/go/pkg/mod \
+    GOOS=${TARGETOS} GOARCH=${TARGETARCH} CGO_ENABLED=0 go build -a -o /go/bin/webhook -ldflags '-w -extldflags "-static"' .
+
+FROM scratch AS image
+COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
+COPY --from=build /go/bin/webhook /usr/local/bin/webhook
+
+ENTRYPOINT ["/usr/local/bin/webhook"]