ScanMaster/compose.yaml at master · vs4vijay/ScanMaster · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
services:
  scanmaster:
    build:
      context: .
      dockerfile: Dockerfile
    profiles: ["scanmaster"]
    user: "10001:10001"
    read_only: true
    cap_drop: ["ALL"]
    security_opt: ["no-new-privileges:true"]
    volumes:
      - scanmaster-data:/data
      - ${SCANMASTER_ZAP_PLAN_HOST_DIRECTORY:-./.scanmaster/zap-plans}:/zap/wrk:rw
    tmpfs: ["/tmp"]
    healthcheck:
      test: ["CMD", "scanmaster", "--version"]
      interval: 30s
      timeout: 5s
      retries: 3
  greenbone:
    image: registry.community.greenbone.net/community/gvmd:stable@sha256:1f8f91e32f31c72c3799665b24653642061cf2c781f9ef22f75995911242ca19
    profiles: ["greenbone"]
    read_only: true
    cap_drop: ["ALL"]
    security_opt: ["no-new-privileges:true"]
    volumes:
      - greenbone-socket:/run/gvmd
  nuclei:
    image: projectdiscovery/nuclei:v3.8.0@sha256:aa3a9c0894629405b5bbe644765dfffd6ff87b7663b5f1d64bcbc01341da335a
    profiles: ["nuclei"]
    entrypoint: ["nuclei"]
    command: ["-version"]
    read_only: true
    cap_drop: ["ALL"]
    security_opt: ["no-new-privileges:true"]
  zap:
    image: ghcr.io/zaproxy/zaproxy:stable@sha256:8d387b1a63e3425beef4846e39719f5af2a787753af2d8b6558c6257d7a577a2
    command: ["zap.sh", "-daemon", "-host", "0.0.0.0", "-port", "8080", "-config", "api.addrs.addr.name=.*", "-config", "api.addrs.addr.regex=true", "-config", "api.key=${SCANMASTER_ZAP_API_KEY:-scanmaster-local-only}"]
    ports:
      - "127.0.0.1:8080:8080"
    volumes:
      - ${SCANMASTER_ZAP_PLAN_HOST_DIRECTORY:-./.scanmaster/zap-plans}:/zap/wrk:rw
    healthcheck:
      test: ["CMD", "curl", "--fail", "http://127.0.0.1:8080/JSON/core/view/version/?apikey=${SCANMASTER_ZAP_API_KEY:-scanmaster-local-only}"]
      interval: 5s
      timeout: 3s
      retries: 30
volumes:
  scanmaster-data:
  greenbone-socket: