mirror of
https://github.com/ghndrx/prowler.git
synced 2026-02-11 07:15:15 +00:00
Write output files (CSV, JSON, etc.) to an `output` directory that is relative to prowler itself, no matter where prowler is invoked from. Simplify Dockerfile by specifying a WORKDIR Replace ADD command with the more recommended COPY command Update README to cover how to run in Docker and access saved reports Add a .dockerignore file to ignore .git and output directories This partially addresses #570 - previously, within Docker, Prowler was attempting to write reports to the root `/` directory in the container, which it did not have permission to do. Instead, reports are now written to a path relative to Prowler
21 lines
420 B
Docker
21 lines
420 B
Docker
FROM alpine:3.9
|
|
|
|
ARG USERNAME=prowler
|
|
ARG USERID=34000
|
|
|
|
RUN addgroup -g ${USERID} ${USERNAME} && \
|
|
adduser -s /bin/sh -G ${USERNAME} -D -u ${USERID} ${USERNAME} && \
|
|
apk --update --no-cache add python3 bash curl jq file && \
|
|
pip3 install --upgrade pip && \
|
|
pip install awscli ansi2html boto3 detect-secrets
|
|
|
|
WORKDIR /prowler
|
|
|
|
COPY . ./
|
|
|
|
RUN chown -R prowler .
|
|
|
|
USER ${USERNAME}
|
|
|
|
ENTRYPOINT ["./prowler"]
|