TheHive-Project / Cortex

Cortex: a Powerful Observable Analysis and Active Response Engine
https://thehive-project.org
GNU Affero General Public License v3.0
1.32k stars 226 forks source link

An error in docker pull should not stop the analysis #431

Closed To-om closed 1 year ago

To-om commented 1 year ago

Request Type

enhancement

Problem Description

The setting docker.autoUpdate controls if the docker image should be pulled before its execution. If the pull fails (because the registry is not available or the image is not present), the analyzer is not run, even if a local docker image exists.

The aim of this issue is to ignore error when trying to update the docker image of the analyzer. If custom analyzers which are not push on the registry is used, the setting docker.autoUpdate can be set to true. For the private analyzer images, it is recommended to set the registry "localhost" in the docker image tag: localhost/my.company/my.analyzer:1.0