Files
Ajin AbrahamandCursor a0f8a0ded1 ci/docker: supply-chain Actions updates and Postgres 18 compose layout (#2643)
* ci: bump Actions versions, pin Docker actions, add Dependabot

Keep CI supply chain current after the Docker SBOM work: update test,
publish, and CodeQL workflows, SHA-pin Docker setup/login actions, and
enable weekly GitHub Actions Dependabot updates.

Co-authored-by: Cursor <[email protected]>

* docker: use Postgres latest and PG18 data volume layout

Co-authored-by: Cursor <[email protected]>

* Bump version to 4.5.2

Co-authored-by: Cursor <[email protected]>

---------

Co-authored-by: Cursor <[email protected]>
2026-08-09 18:14:05 -07:00

52 lines
1.2 KiB
YAML

services:
postgres:
image: "postgres:${POSTGRES_VERSION:-latest}"
restart: always
volumes:
- $HOME/MobSF/postgresql_data:/var/lib/postgresql
environment:
- POSTGRES_USER=postgres
- POSTGRES_PASSWORD_FILE=/run/secrets/mobsfDB_password
- POSTGRES_DB=mobsf
networks:
- mobsf_network
secrets:
- mobsfDB_password
mobsf:
image: ${MOBSF_IMAGE:-opensecurity/mobile-security-framework-mobsf:latest}
restart: always
ports:
- "8000:8000"
- "1337:1337"
volumes:
- $HOME/MobSF/mobsf_data:/home/mobsf/.MobSF
environment:
- POSTGRES_USER=postgres
- POSTGRES_PASSWORD_FILE=/run/secrets/mobsfDB_password
- POSTGRES_DB=mobsf
- POSTGRES_HOST=postgres
- POSTGRES_PORT=5432
- MOBSF_API_KEY_FILE=/run/secrets/mobsf_api_key
healthcheck:
test: curl -f http://localhost:8000/login/ || exit 1
depends_on:
- postgres
networks:
- mobsf_network
extra_hosts:
- "host.docker.internal:host-gateway"
secrets:
- mobsfDB_password
- mobsf_api_key
networks:
mobsf_network:
secrets:
mobsfDB_password:
external: true
mobsf_api_key:
external: true