-
Notifications
You must be signed in to change notification settings - Fork 1
/
Copy pathDockerfile
39 lines (31 loc) · 1.99 KB
/
Dockerfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
FROM openjdk:11
RUN apt-get update \
&& apt-get install -y apt-transport-https make build-essential libssl-dev zlib1g-dev libbz2-dev \
libreadline-dev libsqlite3-dev wget curl llvm libncurses5-dev libncursesw5-dev \
xz-utils tk-dev libffi-dev liblzma-dev python-openssl git zip jq \
&& rm -rf /var/lib/apt/lists/*
ENV PATH="/root/.pyenv/bin:/root/.pyenv/shims/:${PATH}"
RUN curl -s https://pyenv.run | bash \
&& echo 'eval "$(pyenv init -)"\neval "$(pyenv virtualenv-init -)"' > /root/.bashrc \
&& . /root/.bashrc \
&& PYENV_LATEST_V2=$(pyenv install --list | sed 's/^ //' | grep -P '^2.7.\d' | grep -v 'dev\|a\|b' | tail -1) \
&& PYENV_LATEST=$(pyenv install --list | sed 's/^ //' | grep -P '^\d' | grep -v 'dev\|a\|b' | tail -1) \
&& pyenv install $PYENV_LATEST_V2 \
&& pyenv install $PYENV_LATEST \
&& pyenv global $PYENV_LATEST_V2 \
&& pip install --upgrade pip \
&& pip install 'httpie>=0.9.9,<2' \
&& pip install veracode-api-signing
RUN apt-key adv --keyserver keyserver.ubuntu.com --recv-keys DF7DD7A50B746DD4 \
&& echo 'deb https://download.sourceclear.com/ubuntu stable/' > /etc/apt/sources.list.d/srcclr.list \
&& apt-get update \
&& apt-get install srcclr
WORKDIR /veracode
RUN VERACODE_WRAPPER_VERSION=$(curl -sS "https://search.maven.org/solrsearch/select?q=g:%22com.veracode.vosp.api.wrappers%22&rows=20&wt=json" | jq -r '.["response"]["docs"][0].latestVersion') \
&& curl -sS -o veracode-wrapper.jar "https://repo1.maven.org/maven2/com/veracode/vosp/api/wrappers/vosp-api-wrappers-java/${VERACODE_WRAPPER_VERSION}/vosp-api-wrappers-java-${VERACODE_WRAPPER_VERSION}.jar" \
&& echo "Veracode wrapper version $VERACODE_WRAPPER_VERSION"
RUN curl -sS -O https://downloads.veracode.com/securityscan/gl-scanner-java-LATEST.zip \
&& unzip gl-scanner-java-LATEST.zip gl-scanner-java.jar && rm -f gl-scanner-java-LATEST.zip
RUN curl -sS -O https://downloads.veracode.com/securityscan/pipeline-scan-LATEST.zip \
&& unzip pipeline-scan-LATEST.zip pipeline-scan.jar && rm -f unzip pipeline-scan-LATEST.zip
WORKDIR /workspace