diff --git a/Dockerfile b/Dockerfile index 7b0f4d0..570b8dd 100644 --- a/Dockerfile +++ b/Dockerfile @@ -3,12 +3,25 @@ FROM python:3.12.10-alpine3.21 ARG APP_DIR=/opt/app RUN \ - mkdir -p $APP_DIR + adduser -s /bin/sh -D user \ + mkdir -p $APP_DIR \ + chown user:user $APP_DIR + +USER user +WORKDIR $APP_DIR + +COPY src/requirements.txt . +COPY src/sbom-dt-dd.py . +COPY dependencytrack-client/ ./dependencytrack-client +COPY defectdojo-client/ ./defectdojo-client + +RUN \ + python -m venv .venv \ + . ./.venv/bin/activate \ + pip install -r requirements.txt \ + pip install -r dependencytrack-client\requirements.txt \ + pip install -r defectdojo-client\requirements.txt -COPY src/requirements.txt $APP_DIR -COPY src/sbom-dt-dd.py $APP_DIR -COPY dependencytrack-client/ $APP_DIR/dependencytrack-client -COPY defectdojo-client/ $APP_DIR/defectdojo-client