Skip to content

management of particular dependencies #2736

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
mlodic merged 1 commit into from
Feb 14, 2025
Merged

management of particular dependencies #2736

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion docker/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,8 @@ ENV LOG_PATH=/var/log/intel_owl
ARG REPO_DOWNLOADER_ENABLED=true
ARG WATCHMAN=false
ENV watch_logs_cmd="watch -n1 tail -n10 /var/log/intel_owl/django/api_app.log"
ARG PYCTI_VERSION=6.1.0
# This is required to allow compatibility with different OpenCTI instances
ARG PYCTI_VERSION=6.5.1

RUN mkdir -p ${LOG_PATH} \
${LOG_PATH}/django \
Expand Down
9 changes: 5 additions & 4 deletions integrations/malware_tools_analyzers/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,14 +24,14 @@ RUN useradd -ms /bin/bash ${USER} \
WORKDIR ${PROJECT_PATH}

# Install Box-js
RUN npm install [email protected].17 --global --production \
RUN npm install [email protected].27 --global --production \
&& mkdir -p /tmp/boxjs \
&& chown -R ${USER}:${USER} /tmp/boxjs

# Install CAPA
WORKDIR ${PROJECT_PATH}/capa
RUN wget -q https://github.com/mandiant/capa/releases/download/v8.0.0/capa-v8.0.0-linux.zip \
&& unzip capa-v8.0.0-linux.zip \
RUN wget -q https://github.com/mandiant/capa/releases/download/v9.0.0/capa-v9.0.0-linux.zip \
&& unzip capa-v9.0.0-linux.zip \
&& ln -s ${PROJECT_PATH}/capa/capa /usr/local/bin/capa

# Install Floss
Expand Down Expand Up @@ -76,7 +76,7 @@ RUN python3 -m venv venv \

# Install GoReSym
WORKDIR ${PROJECT_PATH}/goresym
RUN wget -q https://github.com/mandiant/GoReSym/releases/download/v2.7.4/GoReSym-linux.zip \
RUN wget -q https://github.com/mandiant/GoReSym/releases/download/v3.0.2/GoReSym-linux.zip \
&& unzip GoReSym-linux.zip \
&& chmod +x GoReSym \
&& ln -s ${PROJECT_PATH}/goresym/GoReSym /usr/local/bin/goresym
Expand Down Expand Up @@ -105,6 +105,7 @@ RUN python3 -m venv venv \
COPY ./droidlysis/general.conf ${PROJECT_PATH}/droidlysis/conf/general.conf

# Install artifacts
# there is no version management on this project so we just pull the most recent changes
WORKDIR ${PROJECT_PATH}/artifacts
RUN python3 -m venv venv \
&& . venv/bin/activate \
Expand Down
2 changes: 2 additions & 0 deletions integrations/malware_tools_analyzers/requirements/droidlysis-requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1 +1,3 @@
# they do not make releases
# if you update this, you should take into considerations all the other dependencies in the Dockerfile too
git+https://github.com/cryptax/droidlysis@c1645a5
16 changes: 16 additions & 0 deletions requirements/hardcoded-requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,16 @@
# This file is used exclusively to trigger dependabot PR.
# The update of the dependencies here has no actual effect.
# For each updated dependency here you have to update its relative version hardcoded in the code.
# So please add a comment for each dependency explaining where the related code must be updated.

# docker/Dockerfile
pycti==6.5.1
# integrations/malware_tools_analyzers/Dockerfile
flare-capa==9.0.0
flare-floss==3.1.1

# other unmanaged versions
# droydlys - they make no new versions, we pin the commit
# goresym - they create releases in the repo
# boxjs - we can get that info from npm packages
# detect it easy - multi arch builds and releases in the repo
Loading