Dockerfile about fortifyvulnerabilityexporter HOT 1 CLOSED

Hi @T1mey, there is no Dockerfile; the Docker image is generated directly from the Gradle build using https://github.com/GoogleContainerTools/jib.

I guess the easiest approach would be to create your own Dockerfile that uses the fortify/fortify-vulnerability-exporter as the base image, and then have your Dockerfile install the necessary certificates. Alternatively, you could possibly use a volume mapping to override the certificate files in the image with custom files.

Given that the Docker image is automatically generated, I'm not fully familiar with its contents, so you'd need to figure out yourself where the certificate files/cacerts are located in the image, and how to best update/override them.

Please let me know once you've figured out how/where to install the certificates, so I can consider adding this information to the FortifyVulnerabilityExporter documentation for the benefit of others with the same issue.

from fortifyvulnerabilityexporter.