search

ICTU / zap2docker-auth-weekly

Zap baseline scanner in Docker with authentication
Apache License 2.0
104 stars 70 forks source link

Some small docker / Podman related improvements #32

Closed zubcevic closed 3 years ago

zubcevic commented 3 years ago

By adding .dockerignore docker builds will not send all files to the docker daemon and will ignore the specified files in the docker add step. The latest podman version will also use this file. For older versions a more defined ADD step is an alternative. The pip install requires an accessible cache dir. Update of Gecko driver Update of PyVirtualDisplay Redhat recommended chrgrp/chmod added for running rootless containers. Github Action workflow added. This does a podman build in the pipeline to see if the build succeeds. Can be extended later on with some additional test or pushing the image to docker hub e.g.

zubcevic commented 3 years ago

You can see the workflow in action as an example here: https://github.com/zubcevic/zap-baseline/actions/workflows/main.yml

dicksnel commented 3 years ago

Cool! I'll take a look at this next week and attempt to merge this.