Vulnerability-Finder/docker-compose.yml at main · roycrisses/Vulnerability-Finder · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
version: "3.9"

services:
  vulnscan:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: vulnscan-orchestrator
    volumes:
      - ./config.yaml:/app/config.yaml:ro
      - ./allowlist.txt:/app/allowlist.txt:ro
      - ./targets.txt:/app/targets.txt:ro
      - ./reports:/app/reports
    environment:
      - VULNSCAN_LOG_LEVEL=INFO
    network_mode: host          # needed for nmap raw sockets
    cap_add:
      - NET_RAW                 # nmap SYN scans
    mem_limit: 4g
    cpus: "2.0"
    restart: "no"
    tty: true                   # allow interactive input
    stdin_open: true            # allow interactive input (bonsai login + target URL)
    develop:
      watch:
        - action: sync
          path: .
          target: /app
          ignore:
            - reports/
            - __pycache__/
            - .git/
            - data/
        - action: rebuild
          path: requirements.txt
        - action: rebuild
          path: Dockerfile