Dockerfile

ARG branch=stable
FROM cccs/assemblyline-v4-service-base:$branch

ENV SERVICE_PATH core.service.WasmAnalyzer

# Install apt dependencies
USER root

COPY pkglist.txt /tmp/setup/
RUN apt-get update && \
    apt-get upgrade -y && \
    apt-get install -y --no-install-recommends \
    $(grep -vE "^\s*(#|$)" /tmp/setup/pkglist.txt | tr "\n" " ") && \
    rm -rf /tmp/setup/pkglist.txt /var/lib/apt/lists/*

# Install python dependencies
USER assemblyline
COPY requirements.txt requirements.txt
RUN pip install \
    --no-cache-dir \
    --user \
    --requirement requirements.txt && \
    rm -rf ~/.cache/pip

# Copy service code
WORKDIR /opt/al_service
COPY . .

# Fix ownership
USER root
RUN chown -R assemblyline:assemblyline /opt/al_service

USER assemblyline