Make build artifacts (ver) immutable

Author: Vadim Bogulean

.env

@@ -1,6 +1,6 @@
 POSTGRES_PASSWORD="postgres_password"
 FCDB_USER="fastcve_db_user"
 FCDB_PASS="fastcve_db_pass"
-FASTCVE_DOCKER_IMG="binareio/fastcve"
+FASTCVE_DOCKER_IMG="binare/fastcve"
 FASTCVE_DOCKER_TAG="latest"
 NVD_API_KEY=

Dockerfile

@@ -1,8 +1,8 @@
 FROM postgres:16-alpine3.19
 
-ARG APP_VERSION=0.1.0
+ARG APP_VERSION=notset
 
-ENV APP_VERSION=${APP_VERSION} FCDB_HOME=/fastcve FCDB_NAME=vuln_db POSTGRES_PASSWORD= FCDB_USER= FCDB_PASS= 
+ENV FCDB_HOME=/fastcve FCDB_NAME=vuln_db POSTGRES_PASSWORD= FCDB_USER= FCDB_PASS= 
 ENV PATH=${FCDB_HOME}:$PATH
 
 RUN apk add gcc g++ build-base python3-dev py3-pip
@@ -17,6 +17,8 @@ COPY ./docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh
 COPY ./start_web.sh /always-init.d/start_web.sh
 COPY ./src ${FCDB_HOME}
 
+RUN sed -i "1i\export APP_VERSION=${APP_VERSION}" ${FCDB_HOME}/config/setenv/setenv_*
+
 RUN mkdir -p ${FCDB_HOME}/logs && chmod +wx ${FCDB_HOME}/logs \
     && chmod +x ${FCDB_HOME}/db/setup_db.sh \
     && chmod +x ${FCDB_HOME}/db/schema.sh \

docker-compose.yml

@@ -14,7 +14,7 @@ services:
             dockerfile: $PWD/Dockerfile
 
             args:
-                APP_VERSION: ${FASTCVE_DOCKER_TAG:-0.1.0}
+                APP_VERSION: ${FASTCVE_DOCKER_TAG:-notset}
 
         environment:
             - INP_ENV_NAME=${INP_ENV_NAME}

src/search

@@ -11,6 +11,7 @@ $ search --help
 Copyright (c) 2020 to date, Binare Oy (license@binare.io) All rights reserved.
 """
 
+import os
 import logging
 import pydantic_argparse
 import argcomplete
@@ -21,8 +22,8 @@ from common.models import SearchOptions
 from common.util import init_db_schema
 from common.search import search_data, results_output
 
-__version__ = '1.0.0'
-__description__ = "fastCVE - fast, rich and API-based search for CVE and more (CPE, CWE, CAPEC)"
+__version__ = os.getenv("APP_VERSION", "modified")
+__description__ = "FastCVE - fast, rich and API-based search for CVE and more (CPE, CWE, CAPEC)"
 
 # ------------------------------------------------------------------------------
 def main():

src/web/app.py

@@ -7,7 +7,7 @@
 from web.models.search import StatusOutput
 import os
 
-version = os.getenv("APP_VERSION", "0.1.0")
+version = os.getenv("APP_VERSION", "modified")
 app = FastAPI(title="FastCVE", description="Fast, Rich and API-based search for CVE and more (CPE, CWE, CAPEC)", version=version)