fix yq, ad subfinder, fix perms and owner for downloaded binaries

Tanq16 · Dec 25, 2023 · 3dd981d · 3dd981d
1 parent f8f1c8a
commit 3dd981d
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/security_docker_main/builder.Dockerfile b/security_docker_main/builder.Dockerfile
@@ -44,11 +44,16 @@ RUN mkdir /testingground && cd /testingground && \
     mv ffuf /executables && cd .. && rm -rf testingground
 RUN mkdir /testingground && cd /testingground && \
     a=$(curl -s https://api.github.com/repos/mikefarah/yq/releases/latest | grep -E "browser_download_url.*" | grep -i "linux" | grep -i "amd64" | grep -v "tar.gz" | cut -d '"' -f4) && \
-    wget "$a" && mv yq_linux_amd64 /executables/yq && cd .. && rm -rf testingground
+    wget "$a" && chmod +x && \
+    mv yq_linux_amd64 /executables/yq && cd .. && rm -rf testingground
 RUN mkdir /testingground && cd /testingground && \
     a=$(curl -s https://api.github.com/repos/fullstorydev/grpcurl/releases/latest | grep -E "browser_download_url.*" | grep -i "linux" | grep -i "x86_64" | cut -d '"' -f4) && \
     wget "$a" -O test.tar.gz && tar -xzf test.tar.gz && \
     mv grpcurl /executables && cd .. && rm -rf testingground
+RUN mkdir /testingground && cd /testingground && \
+    a=$(curl -s https://api.github.com/repos/projectdiscovery/subfinder/releases/latest | grep -E "browser_download_url.*" | grep -i "linux" | grep -i "amd64" | cut -d '"' -f4) && \
+    wget "$a" -O test.zip && unzip test.zip && \
+    mv subfinder /executables && cd .. && rm -rf testingground
 RUN mkdir /testingground && cd /testingground && \
     a=$(curl -s https://api.github.com/repos/projectdiscovery/naabu/releases/latest | grep -E "browser_download_url.*" | grep -i "linux" | grep -i "amd64" | cut -d '"' -f4) && \
     wget "$a" -O test.zip && unzip test.zip && \
@@ -113,6 +118,7 @@ RUN mkdir /testingground && cd /testingground && \
     a=$(curl -s https://api.github.com/repos/aquasecurity/trivy/releases/latest | grep -E "browser_download_url.*" | grep -i "linux" | grep -i "64bit" | grep -i "tar.gz" | grep -vE "sig|pem" | cut -d '"' -f4) && \
     wget "$a" -O test.tar.gz && tar -xzf test.tar.gz && \
     mv trivy /executables && cd .. && rm -rf testingground
+RUN chown -R root:root /opt/executables && chmod 755 /opt/executables/*
 
 FROM golang AS go_builder
 RUN mkdir /executables