diff --git a/docker/Dockerfile b/docker/Dockerfile index 0ac481c..d93fee6 100644 --- a/docker/Dockerfile +++ b/docker/Dockerfile @@ -1,4 +1,4 @@ -FROM ubuntu:20.04 +FROM ubuntu:22.04 LABEL Description="prepare a docker image for executing codeql analysis on a repo" RUN mkdir /workdir @@ -6,16 +6,17 @@ RUN mkdir /workdir/project2scan WORKDIR /workdir RUN apt-get update && \ - apt-get upgrade -y -RUN apt-get install -y ca-certificates && update-ca-certificates -RUN apt-get install -y --no-install-recommends \ + apt-get upgrade -y && \ + apt-get install -y ca-certificates && update-ca-certificates && \ + apt-get install -y --no-install-recommends \ git \ less \ wget \ - unzip + unzip && \ + apt-get clean #SETUP Maven -ENV MAVEN_VERSION 3.8.8 +ENV MAVEN_VERSION 3.9.4 ENV MAVEN_HOME /usr/lib/mvn ENV PATH $MAVEN_HOME/bin:$PATH @@ -24,8 +25,8 @@ RUN wget https://downloads.apache.org/maven/maven-3/$MAVEN_VERSION/binaries/apac rm apache-maven-$MAVEN_VERSION-bin.tar.gz && \ mv apache-maven-$MAVEN_VERSION $MAVEN_HOME -#SETUP codeql cli v2.14.3 -RUN wget https://github.com/github/codeql-cli-binaries/releases/download/v2.14.3/codeql-linux64.zip && \ +#SETUP codeql cli v2.14.6 +RUN wget https://github.com/github/codeql-cli-binaries/releases/download/v2.14.6/codeql-linux64.zip && \ unzip codeql-linux64.zip && \ rm codeql-linux64.zip diff --git a/docker/README.md b/docker/README.md index 62f7f03..d2e3a51 100644 --- a/docker/README.md +++ b/docker/README.md @@ -9,7 +9,7 @@ JAVA runtime provided by CodeQL CLI is used Pull from [DockerHub](https://hub.docker.com/r/arburk/codeql-analyzer-java): `docker pull arburk/codeql-analyzer-java` or build image like following: -`docker build . -t arburk/codeql-analyzer-java:2.14.3` +`docker build . -t arburk/codeql-analyzer-java:2.14.6` The project to scan needs to be mounted into ___/workdir/project2scan/___ like following: -`docker run -v c:/dev/repos/myJavaProject:/workdir/project2scan arburk/codeql-analyzer-java:2.14.3` +`docker run -v c:/dev/repos/myJavaProject:/workdir/project2scan arburk/codeql-analyzer-java:2.14.6`