1 parent 436e419 commit f6bf3f5Copy full SHA for f6bf3f5
2 files changed
.dockerignore
@@ -0,0 +1,5 @@
1
+__pycache__/
2
+*.pyc
3
+sbom/
4
+reports/
5
+.venv/
Dockerfile
@@ -0,0 +1,25 @@
+FROM python:3.11-slim
+
+# Set up work directory
+WORKDIR /aegisflow
6
+# Install system tools
7
+RUN apt-get update && apt-get install -y curl jq git && rm -rf /var/lib/apt/lists/*
8
9
+# Install Python deps
10
+COPY requirements.txt .
11
+RUN pip install --no-cache-dir -r requirements.txt
12
13
+# Install Syft
14
+RUN curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b /usr/local/bin
15
16
+# Install Trivy
17
+RUN curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin
18
19
+# Install Semgrep
20
+RUN pip install semgrep
21
22
+# Copy rest of project
23
+COPY . .
24
25
+CMD ["bash"]
0 commit comments