Wolfgang Hottgenroth
4ddb6cfd30
Some checks are pending
ci/woodpecker/tag/woodpecker Pipeline is pending
47 lines
1.1 KiB
Docker
47 lines
1.1 KiB
Docker
FROM python:3.12.10-alpine3.22
|
|
|
|
ENV DTRACK_API_URL=""
|
|
ENV DTRACK_TOKEN=""
|
|
ENV DEFECTDOJO_URL=""
|
|
ENV DEFECTDOJO_TOKEN=""
|
|
|
|
ARG APP_DIR=/opt/app
|
|
ARG ADDITIONAL_CA_URL=""
|
|
ARG ADDITIONAL_CA_CHECKSUM=""
|
|
|
|
RUN \
|
|
apk add --no-cache syft &&\
|
|
adduser -s /bin/sh -D user &&\
|
|
mkdir -p $APP_DIR &&\
|
|
chown user:user $APP_DIR &&\
|
|
if [ "$ADDITIONAL_CA_URL" != "" -a "$ADDITIONAL_CA_CHECKSUM" != "" ]; then \
|
|
cd /usr/share/ca-certificates; \
|
|
wget --no-check-certificate -O custom-ca.crt $ADDITIONAL_CA_URL; \
|
|
echo "a921e440a742f1e67c7714306e2c0d76 custom-ca.crt" | md5sum -c; \
|
|
/usr/sbin/update-ca-certificates; \
|
|
echo "custom ca added"; \
|
|
else \
|
|
echo "no additional ca"; \
|
|
fi
|
|
|
|
USER user
|
|
WORKDIR $APP_DIR
|
|
|
|
COPY src/requirements.txt .
|
|
COPY src/sbom-dt-dd.py .
|
|
COPY src/entrypoint.sh .
|
|
COPY dependencytrack-client/ ./dependencytrack-client
|
|
COPY defectdojo-client/ ./defectdojo-client
|
|
|
|
RUN \
|
|
python -m venv .venv &&\
|
|
. ./.venv/bin/activate &&\
|
|
pip install -r requirements.txt &&\
|
|
pip install -r dependencytrack-client/requirements.txt &&\
|
|
pip install -r defectdojo-client/requirements.txt
|
|
|
|
ENTRYPOINT [ "./entrypoint.sh" ]
|
|
|
|
|
|
|