demisto / dockerfiles
Demisto's Dockerfiles and Image Build Management
AI Architecture Analysis
This repository is indexed by RepoMind. By analyzing demisto/dockerfiles in our AI interface, you can instantly generate complete architecture diagrams, visualize control flows, and perform automated security audits across the entire codebase.
Our Agentic Context Augmented Generation (Agentic CAG) engine loads full source files into context on-demand, avoiding the fragmentation of traditional RAG systems. Ask questions about the architecture, dependencies, or specific features to see it in action.
Repository Overview (README excerpt)
Crawler viewCortex XSOAR Dockerfiles and Image Build Management This repository's branch tracks images pushed to the official Demisto Docker Hub organization. Other branches dockerfiles-info Dockerfiles git pipenv poetry docker/ldap Dockerfile pipenv poetry Pipfile pyproject.toml docker/build_docker.sh git origin/master ldap devtesting testing DOCKER_ORG DOCKERHUB_USER DOCKERHUB_PASSWORD DOCKER_INCLUDE_GREP mytest grep python python3 build.conf name=value 1.0.0 1.0.0.15519 devdemisto demisto build.conf dynamic_version.sh alpine alpine cryptography cryptography Pipfile verify.py verify.py verify.py verify.py docker/create_new_docker_image.py -t --type powershell docker/pwsh-azure pwsh- powershell- verify.ps1 verify.py verify.ps1 development devdemisto ldap3 devdemisto/ldap3 dockerfiles docker pull docker load Pipfile pyproject.toml Pipfile pyproject.toml docker buildx build pipenv lock poetry export -f requirements.txt --output requirements.txt --without-hashes Pipfile Pipfile.lock pyproject.toml poetry.lock Poetry poetry --version curl -sSL https://install.python-poetry.org | python3 poetry init poetry add poetry add requests pyproject.toml poetry.lock poetry export -f requirements.txt --output requirements.txt --without-hashes pipenv pipenv is also supported. If you want to use manually make sure you first meet the pre-requisites installed as specified in the Prerequisites section. Then follow: • In the relevant folder initialize the pipenv environment: • Install dependencies using: . For example: • Make sure to commit both and files • To see the locked dependencies run: Installing a Common Dependency If you want to install a new common dependency in all python base images use the script: . Usage: **Note:** By default pipenv will install the specified dependency and also update all other dependencies if possible. If you want to only install a dependency and not update the existing dependencies run the script with the env variable: . For example: Automatic updates via Dependabot We use dependabot for automated dependency updates. When a new image is added to the repository there is need to add the proper config to .github/dependabot.yml. If you used the to create the docker image, then this config will be added automatically by the script. Otherwise, you will need to add the proper dependabot config. The build will fail without this config. You can add the dependabot config by running the script: For example: How to mark image as deprecated To mark an image as deprecated please follow the following steps: • Add the following two keys to the build.conf of the image. • deprecated=true • deprecated_reason=free text (i.e.: version=1.0.0 deprecated=true deprecated_reason="the image was merged into py3-tools") • 2- Build the docker by running the docker/build_docker.sh • (i.e. /home/users/dockerfiles$ docker/build_docker.sh emoji) By running the build script the image information will be added to the deprecated_images.json and 2 new environment variables will be introduced in the docker : • DEPRECATED_IMAGE=true • DEPRECATED_REASON="the same text as deprecated_reason key from the build.conf file" • 3- commit all changed files including the deprecated_image.json and create a new PR