Skip to content

Updated Dependency check version in docker image. #148

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 4 commits into
base: master
Choose a base branch
from
Open

Updated Dependency check version in docker image. #148

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
437dd19
Updated Dependency check version in docker image.
bobthesecurityguy Feb 26, 2019
6a02917
Moving docker image Dependency Check installation to a single RUN com…
bobthesecurityguy Mar 4, 2019
a47e3c5
Cleaning up downloaded installer files after extraction.
bobthesecurityguy Apr 1, 2019
30a7bc9
Adding line continuation to keep the dependency check installation as…
bobthesecurityguy Apr 2, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 10 additions & 2 deletions docker/glue/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -68,8 +68,16 @@ RUN git checkout rg-local-scan
WORKDIR /home/glue/tools/

# OWASP DEPENDENCY CHECK (needs unzip and default-jre)
RUN curl -L http://dl.bintray.com/jeremy-long/owasp/dependency-check-1.4.3-release.zip --output owasp-dep-check.zip
RUN unzip owasp-dep-check.zip
# Release updates published at: https://bintray.com/jeremy-long/owasp/dependency-check
RUN gpg --keyserver hkp://keys.gnupg.net --recv-keys F9514E84AE3708288374BBBE097586CFEA37F9A6 \
&& curl -L http://dl.bintray.com/jeremy-long/owasp/dependency-check-4.0.3-release.zip --output owasp-dep-check.zip \
&& curl -L http://dl.bintray.com/jeremy-long/owasp/dependency-check-4.0.3-release.zip.asc --output owasp-dep-check.zip.asc \
&& gpg --verify owasp-dep-check.zip.asc \
&& unzip owasp-dep-check.zip \
&& rm owasp-dep-check.zip owasp-dep-check.zip.asc

# Mono (Required for OWASP Dependency Check scans of .exe and .dll files)
RUN sudo apt-get install -y mono-runtime mono-devel

# Maven
RUN sudo apt-get install -y maven
Expand Down