From 6bd81d6ddef349f411f66951efc8cbb08eab952a Mon Sep 17 00:00:00 2001 From: j3ssie Date: Tue, 10 Feb 2026 17:27:20 +0700 Subject: [PATCH] build(docker): replace install script with preset and add sast tools - Replace curl-based installation with 'osmedeus install base --preset' command - Add explicit binary installation for trivy, semgrep, and kingfisher for SAST testing - Comment out original install script line for reference --- build/docker/Dockerfile.canary | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/build/docker/Dockerfile.canary b/build/docker/Dockerfile.canary index 51c97bc..c34dc12 100644 --- a/build/docker/Dockerfile.canary +++ b/build/docker/Dockerfile.canary @@ -44,8 +44,14 @@ RUN mkdir -p /root/osmedeus-base /root/workspaces-osmedeus /root/go/bin WORKDIR /root +# # Install osmedeus via official install script +# RUN curl -fsSL https://www.osmedeus.org/install.sh | bash + # Install released osmedeus (pulls workflows, tools, etc.) -RUN curl -fsSLk https://www.osmedeus.org/install.sh | bash +RUN osmedeus install base --preset + +# This is for sast test +RUN osmedeus install binary --name trivy --name semgrep --name kingfisher ENV PATH="/root/.local/bin:/root/go/bin:/root/osmedeus-base/external-binaries:${PATH}"