diff --git a/Makefile b/Makefile index 5188364f..2e998633 100644 --- a/Makefile +++ b/Makefile @@ -1,8 +1,13 @@ # Multi-platform Docker build and publish for CyberChef -IMAGE_NAME ?= ghcr.io/gchq/cyberchef +IMAGE_NAME ?= ghcr.io/mkilijanek/cyberchef PLATFORMS ?= linux/amd64,linux/arm64 MONTHLY_TAG ?= $(shell date +%Y-%m) +SBOM ?= false +PROVENANCE ?= false + +SBOM_FLAG := $(if $(filter true,$(SBOM)),--sbom=true,) +PROVENANCE_FLAG := $(if $(filter true,$(PROVENANCE)),--provenance=true,) .PHONY: check-branch build publish scan @@ -26,14 +31,14 @@ build: check-branch publish: check-branch docker buildx build \ --pull \ - --platform $(PLATFORMS) \ - --tag $(IMAGE_NAME):latest \ - --tag $(IMAGE_NAME):$(MONTHLY_TAG) \ - --sbom=true \ - --provenance=true \ - --push \ - . - $(MAKE) scan + --platform $(PLATFORMS) \ + --tag $(IMAGE_NAME):latest \ + --tag $(IMAGE_NAME):$(MONTHLY_TAG) \ + $(SBOM_FLAG) \ + $(PROVENANCE_FLAG) \ + --push \ + . + $(MAKE) scan scan: docker scout cves $(IMAGE_NAME):latest --only-severity critical,high || true diff --git a/package-lock.json b/package-lock.json index b93d21b0..61cf01f2 100644 --- a/package-lock.json +++ b/package-lock.json @@ -73,7 +73,7 @@ "moment": "^2.30.1", "moment-timezone": "^0.5.45", "ngeohash": "^0.6.3", - "node-forge": "^1.3.1", + "node-forge": "^1.3.3", "node-md6": "^0.1.0", "nodom": "^2.4.0", "notepack.io": "^3.0.1", @@ -159,6 +159,10 @@ "webpack-dev-server": "5.2.1", "webpack-node-externals": "^3.0.0", "worker-loader": "^3.0.8" + }, + "overrides": { + "pbkdf2": "^3.1.5", + "sha.js": "^2.4.12" } }, "node_modules/@ampproject/remapping": { diff --git a/package.json b/package.json index 09d65c02..66320acc 100644 --- a/package.json +++ b/package.json @@ -160,7 +160,7 @@ "moment": "^2.30.1", "moment-timezone": "^0.5.45", "ngeohash": "^0.6.3", - "node-forge": "^1.3.1", + "node-forge": "^1.3.3", "node-md6": "^0.1.0", "nodom": "^2.4.0", "notepack.io": "^3.0.1", @@ -190,6 +190,10 @@ "xregexp": "^5.1.1", "zlibjs": "^0.3.1" }, + "overrides": { + "pbkdf2": "^3.1.5", + "sha.js": "^2.4.12" + }, "scripts": { "start": "npx grunt dev", "build": "npx grunt prod",