feat: add production website Dockerfile - #622
Merged
Merged
Conversation
Retain the non-SSH legacy report outputs while caching release archives and revalidating STIX inputs between BuildKit builds.
Install the MITRE trust bundle before downloading release artifacts or contacting internal services during the website image build.
Keep the public Dockerfile generic while allowing trusted builds to supply organization-specific trust setup commands.
scotluns
force-pushed
the
refactor-dockerfile
branch
from
July 27, 2026 21:02
4486deb to
7773efe
Compare
Align the Docker image builder and GitHub Pages workflow on Node 26.
Align the Docker builder with the Python 3.13 GitHub Pages workflow.
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| WORKDIR /src/attack-search | ||
|
|
||
| COPY attack-search/package*.json ./ | ||
| RUN npm ci |
| WORKDIR /src/attack-website | ||
|
|
||
| COPY requirements.txt ./ | ||
| RUN python3 -m pip install --no-cache-dir wheel \ |
|
|
||
| COPY requirements.txt ./ | ||
| RUN python3 -m pip install --no-cache-dir wheel \ | ||
| && python3 -m pip install --no-cache-dir -r requirements.txt \ |
| --layers output/changes/layer-enterprise.json output/changes/layer-mobile.json output/changes/layer-ics.json | ||
|
|
||
|
|
||
| FROM nginx:stable-alpine AS production |
Only pass the update-attack extras flag when the build argument is supplied.
Align the Docker build default with the current ATT&CK 19.1 release.
Only pass the update-attack branding flag when the build argument is enabled.
Explain the POSIX no-op used when no CA setup command is provided.
Exclude local VCS and build artifacts, and remove the unused raw-STIX cache setting.
Isolate release comparison in a dedicated Docker stage and skip it by default.
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description of what has changed
Adds a production Dockerfile for building the ATT&CK website as a deployable static-site image.
Validation: docker build --check . passes.