| ADD alpine-minirootfs-3.23.3-x86_64.tar.gz / # buildkit |
| CMD ["/bin/sh"] |
| ENV JAVA_HOME=/opt/java/openjdk |
| ENV PATH=/opt/java/openjdk/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin |
| ENV LANG=en_US.UTF-8 LANGUAGE=en_US:en LC_ALL=en_US.UTF-8 |
| RUN /bin/sh -c set -eux; apk add --no-cache fontconfig ttf-dejavu gnupg ca-certificates p11-kit-trust musl-locales musl-locales-lang tzdata coreutils openssl ; rm -rf /var/cache/apk/* # buildkit |
| ENV JAVA_VERSION=jdk-17.0.18+8 |
| RUN /bin/sh -c set -eux; ARCH="$(apk --print-arch)"; case "${ARCH}" in x86_64) ESUM='3226a10cf4f7ef8f835148ce8737490f0cf63e38a1e3ba26cf1e05d9e28adf5c'; BINARY_URL='https://github.com/adoptium/temurin17-binaries/releases/download/jdk-17.0.18%2B8/OpenJDK17U-jre_x64_alpine-linux_hotspot_17.0.18_8.tar.gz'; ;; *) echo "Unsupported arch: ${ARCH}"; exit 1; ;; esac; wget -O /tmp/openjdk.tar.gz ${BINARY_URL}; wget -O /tmp/openjdk.tar.gz.sig ${BINARY_URL}.sig; export GNUPGHOME="$(mktemp -d)"; gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 3B04D753C9050D9A5D343F39843C48A565F8F04B; gpg --batch --verify /tmp/openjdk.tar.gz.sig /tmp/openjdk.tar.gz; rm -rf "${GNUPGHOME}" /tmp/openjdk.tar.gz.sig; echo "${ESUM} */tmp/openjdk.tar.gz" | sha256sum -c -; mkdir -p "$JAVA_HOME"; tar --extract --file /tmp/openjdk.tar.gz --directory "$JAVA_HOME" --strip-components 1 --no-same-owner ; rm -f /tmp/openjdk.tar.gz; # buildkit |
| RUN /bin/sh -c set -eux; echo "Verifying install ..."; echo "java --version"; java --version; echo "Complete." # buildkit |
| COPY --chmod=755 entrypoint.sh /__cacert_entrypoint.sh # buildkit |
| ENTRYPOINT ["/__cacert_entrypoint.sh"] |
| LABEL maintainer=psiinon@gmail.com |
| RUN /bin/sh -c apk add --no-cache bash curl # buildkit |
| USER root |
| WORKDIR /zap |
| COPY --chown=1000:1000 /zap . # buildkit |
| COPY --chown=1000:1000 policies /home/zap/.ZAP/policies/ # buildkit |
| RUN /bin/sh -c echo "zap2docker-bare" > /zap/container # buildkit |
| RUN /bin/sh -c /usr/sbin/adduser -u 1000 -h /home/zap -s /bin/bash -D zap # buildkit |
| USER zap |
| ENV PATH=/opt/java/openjdk/bin:/zap/:/opt/java/openjdk/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin |
| ENV ZAP_PATH=/zap/zap.sh |
| ENV HOME=/home/zap/ |
| ENV ZAP_PORT=8080 |
| ENV IS_CONTAINERIZED=true |
| HEALTHCHECK &{["CMD-SHELL" "curl --silent --output /dev/null --fail http://localhost:$ZAP_PORT/ || exit 1"] "0s" "0s" "0s" "0s" '\x00'} |
| LABEL run.crashoverride.origin-uri=https://github.com/zaproxy/zaproxy |
| LABEL run.crashoverride.commit-id=884d3aa4ad5a23a0d177a31852f3ac1e5d397f04 |
| LABEL run.crashoverride.branch=main |
| LABEL run.crashoverride.author=Sanjay Malakar <iamsanjaymalakar@gmail.com> |
| LABEL run.crashoverride.committer=GitHub <noreply@github.com> |
| LABEL run.crashoverride.date-authored=2026-04-15T15:01:52.000+00:00 |
| LABEL run.crashoverride.date-committed=2026-04-15T15:01:52.000+00:00 |
| COPY --chmod=0444 chalk-DT8e9HEq-file.tmp /chalk.json # buildkit |
| USER root |
| RUN /bin/sh -c apk add --no-cache erlang28 # buildkit |
| COPY /build/build/erlang-shipment /opt/openpen-agent # buildkit |
| COPY config.toml /opt/openpen-agent/default/config.toml # buildkit |
| COPY template.md /opt/openpen-agent/default/template.md # buildkit |
| COPY entrypoint-wrapper.sh /usr/local/bin/openpen-agent # buildkit |
| RUN /bin/sh -c chmod +x /usr/local/bin/openpen-agent # buildkit |
| RUN /bin/sh -c adduser -D -s /bin/false openpen && mkdir -p /reports && chown openpen:openpen /reports # buildkit |
| USER openpen |
| WORKDIR /opt/openpen-agent |
| ENTRYPOINT ["openpen-agent"] |
