973ff65989
Replace lightweight cis_runner.py with Oracle's official cis_reports.py engine (6660 lines, 48 CIS + 11 OBP checks). Add granular execution parameters (Level, OBP, Raw Data, Redact), per-report file storage with category browser, tenancy filter in Downloads, and individual file download. Add CIS Engine auto-update: check/download latest cis_reports.py from Oracle's GitHub repo with automatic patch reapplication (admin UI card + 3 new endpoints). Save engine version to app_settings on startup. Update README to v1.8 with new features, API endpoints, and versioning table.
26 lines
544 B
Docker
26 lines
544 B
Docker
FROM python:3.12-slim
|
|
|
|
WORKDIR /app
|
|
|
|
# Install system deps
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
curl gcc libffi-dev && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
# Install Python deps + OCI CLI
|
|
COPY requirements.txt .
|
|
RUN pip install --no-cache-dir -r requirements.txt && \
|
|
pip install --no-cache-dir oci-cli
|
|
|
|
# Copy app
|
|
COPY app.py .
|
|
COPY cis_reports.py .
|
|
COPY mcp_cis_server.py .
|
|
|
|
# Data volume
|
|
RUN mkdir -p /data
|
|
|
|
EXPOSE 8000
|
|
|
|
CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "8000", "--workers", "2"]
|