mirror of
https://github.com/KeygraphHQ/juice-shop.git
synced 2026-11-07 11:06:06 -10:00
42 lines
1.6 KiB
Docker
42 lines
1.6 KiB
Docker
FROM node:22 AS installer
|
|
COPY . /juice-shop
|
|
WORKDIR /juice-shop
|
|
RUN npm i -g typescript ts-node
|
|
RUN npm install --omit=dev --unsafe-perm
|
|
RUN npm dedupe --omit=dev
|
|
RUN rm -rf frontend/node_modules
|
|
RUN rm -rf frontend/.angular
|
|
RUN rm -rf frontend/src/assets
|
|
RUN mkdir logs
|
|
RUN chown -R 65532 logs
|
|
RUN chgrp -R 0 ftp/ frontend/dist/ logs/ data/ i18n/
|
|
RUN chmod -R g=u ftp/ frontend/dist/ logs/ data/ i18n/
|
|
RUN rm data/chatbot/botDefaultTrainingData.json || true
|
|
RUN rm ftp/legal.md || true
|
|
RUN rm i18n/*.json || true
|
|
|
|
ARG CYCLONEDX_NPM_VERSION=latest
|
|
RUN npm install -g @cyclonedx/cyclonedx-npm@$CYCLONEDX_NPM_VERSION
|
|
RUN npm run sbom
|
|
|
|
FROM gcr.io/distroless/nodejs22-debian12
|
|
ARG BUILD_DATE
|
|
ARG VCS_REF
|
|
LABEL maintainer="Bjoern Kimminich <[email protected]>" \
|
|
org.opencontainers.image.title="OWASP Juice Shop" \
|
|
org.opencontainers.image.description="Probably the most modern and sophisticated insecure web application" \
|
|
org.opencontainers.image.authors="Bjoern Kimminich <[email protected]>" \
|
|
org.opencontainers.image.vendor="Open Worldwide Application Security Project" \
|
|
org.opencontainers.image.documentation="https://help.owasp-juice.shop" \
|
|
org.opencontainers.image.licenses="MIT" \
|
|
org.opencontainers.image.version="18.0.0" \
|
|
org.opencontainers.image.url="https://owasp-juice.shop" \
|
|
org.opencontainers.image.source="https://github.com/juice-shop/juice-shop" \
|
|
org.opencontainers.image.revision=$VCS_REF \
|
|
org.opencontainers.image.created=$BUILD_DATE
|
|
WORKDIR /juice-shop
|
|
COPY --from=installer --chown=65532:0 /juice-shop .
|
|
USER 65532
|
|
EXPOSE 3000
|
|
CMD ["/juice-shop/build/app.js"]
|