Code Monkey home page Code Monkey logo

tools-image's Introduction

tools-image

This repository contains all files necessary to build a Docker image, containing several security-related tools. The tools can then easily be used in a Continuous Integration pipeline, by using this image.

Some of the tools are binaries (for example the SonarQube scanner), some are Python libraries, and some are Node packages.

The accompanying .gitlab-ci.yml file can be used to automatically test the image, using several automated security testing tools.

A prebuilt Docker image can be found on https://hub.docker.com/repository/docker/gofwd/tools-image and downloaded from docker.io using the tag gofwd/tools-image

The following tools are available:

  • ansible-lint
  • curl
  • cyclonedx-bom
  • detect-secrets
  • grype
  • nikto.pl
  • nmap
  • npm
  • pylint
  • sonar-scanner
  • ssh-audit
  • testssl.sh
  • yamllint

tools-image's People

Contributors

petermosmans avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar

tools-image's Issues

Building the image fails - error: subprocess-exited-with-error

Hi Peter, I tried building the image as follows
docker build -t tools-image .
it did not go through as you can notice in the following error during the build in step 10

Step 10/26 : RUN pip3 install -r requirements.txt
 ---> Running in 70a7b2a43af9
Collecting anchorecli
  Downloading anchorecli-0.9.3.tar.gz (44 kB)
     ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 44.3/44.3 kB 147.3 kB/s eta 0:00:00
  Preparing metadata (setup.py): started
  Preparing metadata (setup.py): finished with status 'done'
Collecting ansible-lint
  Downloading ansible_lint-24.2.0-py3-none-any.whl (297 kB)
     ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 297.5/297.5 kB 696.6 kB/s eta 0:00:00
Collecting detect-secrets
  Downloading detect_secrets-1.4.0-py3-none-any.whl (116 kB)
     ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 116.3/116.3 kB 805.0 kB/s eta 0:00:00
Collecting trufflehog
  Downloading truffleHog-2.2.1-py2.py3-none-any.whl (13 kB)
Collecting Click==8.0.1
  Downloading click-8.0.1-py3-none-any.whl (97 kB)
     ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 97.4/97.4 kB 685.9 kB/s eta 0:00:00
Collecting PyYAML==5.4.1
  Downloading PyYAML-5.4.1.tar.gz (175 kB)
     ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 175.1/175.1 kB 1.5 MB/s eta 0:00:00

Installing build dependencies: started
  Installing build dependencies: finished with status 'done'
  Getting requirements to build wheel: started
  Getting requirements to build wheel: finished with status 'error'
  error: subprocess-exited-with-error
                                                                                                                                                                                
  × Getting requirements to build wheel did not run successfully.                                                                                                               
  │ exit code: 1                                                                                                                                                                
  ╰─> [54 lines of output]                                                                                                                                                      
      running egg_info                                                                                                                                                          
      writing lib3/PyYAML.egg-info/PKG-INFO                                                                                                                                     
      writing dependency_links to lib3/PyYAML.egg-info/dependency_links.txt                                                                                                     
      writing top-level names to lib3/PyYAML.egg-info/top_level.txt                                                                                                             
      Traceback (most recent call last):                                                                                                                                        
        File "/opt/venv/lib/python3.11/site-packages/pip/_vendor/pyproject_hooks/_in_process/_in_process.py", line 353, in <module>                                             
          main()                                                                                                                                                                
        File "/opt/venv/lib/python3.11/site-packages/pip/_vendor/pyproject_hooks/_in_process/_in_process.py", line 335, in main                                                 
          json_out['return_val'] = hook(**hook_input['kwargs'])                                                                                                                 
                                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^                                                                                                                 
        File "/opt/venv/lib/python3.11/site-packages/pip/_vendor/pyproject_hooks/_in_process/_in_process.py", line 118, in get_requires_for_build_wheel                         
          return hook(config_settings)                                                                                                                                          
                 ^^^^^^^^^^^^^^^^^^^^^                                                                                                                                          
        File "/tmp/pip-build-env-b94i81k1/overlay/lib/python3.11/site-packages/setuptools/build_meta.py", line 325, in get_requires_for_build_wheel                             
          return self._get_build_requires(config_settings, requirements=['wheel'])                                                                                              
                 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^                                                                                              
        File "/tmp/pip-build-env-b94i81k1/overlay/lib/python3.11/site-packages/setuptools/build_meta.py", line 295, in _get_build_requires                                      
          self.run_setup()                                                                                                                                                      
        File "/tmp/pip-build-env-b94i81k1/overlay/lib/python3.11/site-packages/setuptools/build_meta.py", line 311, in run_setup                                                
          exec(code, locals())                                                                                                                                                  
        File "<string>", line 271, in <module>                                                                                                                                  
        File "/tmp/pip-build-env-b94i81k1/overlay/lib/python3.11/site-packages/setuptools/__init__.py", line 103, in setup                                                      
          return distutils.core.setup(**attrs)                                                                                                                                  
                 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^                                                                                                                                  
        File "/tmp/pip-build-env-b94i81k1/overlay/lib/python3.11/site-packages/setuptools/_distutils/core.py", line 185, in setup                                               
          return run_commands(dist)                                                                                                                                             
                 ^^^^^^^^^^^^^^^^^^                                                                                                                                             
        File "/tmp/pip-build-env-b94i81k1/overlay/lib/python3.11/site-packages/setuptools/_distutils/core.py", line 201, in run_commands                                        
          dist.run_commands()                                                                                                                                                   
        File "/tmp/pip-build-env-b94i81k1/overlay/lib/python3.11/site-packages/setuptools/_distutils/dist.py", line 969, in run_commands
          self.run_command(cmd)
        File "/tmp/pip-build-env-b94i81k1/overlay/lib/python3.11/site-packages/setuptools/dist.py", line 963, in run_command
          super().run_command(command)
        File "/tmp/pip-build-env-b94i81k1/overlay/lib/python3.11/site-packages/setuptools/_distutils/dist.py", line 988, in run_command
          cmd_obj.run()
        File "/tmp/pip-build-env-b94i81k1/overlay/lib/python3.11/site-packages/setuptools/command/egg_info.py", line 321, in run
          self.find_sources()
        File "/tmp/pip-build-env-b94i81k1/overlay/lib/python3.11/site-packages/setuptools/command/egg_info.py", line 329, in find_sources
          mm.run()
        File "/tmp/pip-build-env-b94i81k1/overlay/lib/python3.11/site-packages/setuptools/command/egg_info.py", line 550, in run
          self.add_defaults()
        File "/tmp/pip-build-env-b94i81k1/overlay/lib/python3.11/site-packages/setuptools/command/egg_info.py", line 588, in add_defaults
          sdist.add_defaults(self)
        File "/tmp/pip-build-env-b94i81k1/overlay/lib/python3.11/site-packages/setuptools/command/sdist.py", line 102, in add_defaults
          super().add_defaults()
        File "/tmp/pip-build-env-b94i81k1/overlay/lib/python3.11/site-packages/setuptools/_distutils/command/sdist.py", line 251, in add_defaults
          self._add_defaults_ext()
        File "/tmp/pip-build-env-b94i81k1/overlay/lib/python3.11/site-packages/setuptools/_distutils/command/sdist.py", line 336, in _add_defaults_ext
          self.filelist.extend(build_ext.get_source_files())
                               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
        File "<string>", line 201, in get_source_files
        File "/tmp/pip-build-env-b94i81k1/overlay/lib/python3.11/site-packages/setuptools/_distutils/cmd.py", line 107, in __getattr__
          raise AttributeError(attr)
      AttributeError: cython_sources
      [end of output]
  
  note: This error originates from a subprocess, and is likely not a problem with pip.
error: subprocess-exited-with-error

× Getting requirements to build wheel did not run successfully.
│ exit code: 1
╰─> See above for output.

note: This error originates from a subprocess, and is likely not a problem with pip.
The command '/bin/sh -c pip3 install -r requirements.txt' returned a non-zero code: 1

Adding Branch Sources to Jenkins fails

When adding the Branch Source to Jenkins, using Jenkins Public/private key, I'm able to select the correct repository from Gitlab (tools-image) but when apply or save we get a login error:

A problem occurred while processing the request.

Logging ID=b29c6c25-e2f8-4f06-9577-4a4f09b7ad58

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.