This commit is contained in:
+3
-3
@@ -12,13 +12,13 @@ RUN curl -Lo /bin/hadolint https://github.com/hadolint/hadolint/releases/downloa
|
||||
chmod +x /bin/hadolint
|
||||
|
||||
# Install Checkov (for Kubernetes security scanning)
|
||||
RUN pip install checkov==3.1.123
|
||||
RUN pip install checkov
|
||||
|
||||
# Install Trivy (for container and IaC scanning) - Native MCP server
|
||||
RUN curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin v0.47.0
|
||||
RUN curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin
|
||||
|
||||
# Install Semgrep (for code scanning) - Will use native MCP server
|
||||
RUN pip install semgrep==1.76.0
|
||||
RUN pip install semgrep
|
||||
|
||||
# Install UV package manager
|
||||
COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
|
||||
|
||||
Reference in New Issue
Block a user