search

OWASP / glue

Application Security Automation
Other
522 stars 112 forks source link

Glue Dependencies #123

Open JStyle21 opened 6 years ago

JStyle21 commented 6 years ago

Hi,

What are the glue dependencies for running as a standalone? the ones listed are for the tools it supports as far as i've seen.

Does it have any ruby gem dependencies?

omerlh commented 6 years ago

You can take a look at the Gemfile and on the Gemspec. Those file specified all the dependencies for Glue. What do you mean by "standalone"? Glue should be used to run other security tools.

JStyle21 commented 6 years ago

I meant only the core Glue functionality which is mandatory no optional parts, something towards your efforts with efaea28102c9266085b285efb9624688f521ec80

On Wed, May 16, 2018 at 7:28 AM, Omer Levi Hevroni <notifications@github.com

wrote:

You can take a look at the Gemfile https://github.com/OWASP/glue/blob/master/Gemfile and on the Gemspec https://github.com/OWASP/glue/blob/master/glue.gemspec. Those file specified all the dependencies for Glue. What do you mean by "standalone"? Glue should be used to run other security tools.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/OWASP/glue/issues/123#issuecomment-389390880, or mute the thread https://github.com/notifications/unsubscribe-auth/AGRjwctuS1TYwQrOSZudwZ7cqz8XFbZhks5ty6sCgaJpZM4UAkEX .

omerlh commented 6 years ago

What do you mean by "mandatory"? Many Glue dependencies exist because of a specific security tool integration. Because of Ruby behavior, you can create "broken" version of Glue - containing only the required dependencies for the tools you need. This will work for you, but any other functionality of Glue might be broken. BTW last week we released the raw docker image on dockerhub - use the tag raw-latests. It contains the docker image you specified. What I did in this image was installing only Glue, without any additional security tool. This should be used as a base image, where you can install the tools you need on it.

stale[bot] commented 6 years ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.