chore: add APP_VERSION build argument for dynamic version injection

Author: Vadim Bogulean

.env

@@ -1,5 +1,6 @@
 POSTGRES_PASSWORD="postgres_password"
 FCDB_USER="fastcve_db_user"
 FCDB_PASS="fastcve_db_pass"
-FASTCVE_DOCKER_IMG="binareio/fastcve:latest"
+FASTCVE_DOCKER_IMG="binareio/fastcve"
+FASTCVE_DOCKER_TAG="latest"
 NVD_API_KEY=

.github/workflows/build-and-push.yml

@@ -26,7 +26,8 @@ jobs:
       # Step 4: Build Docker Image with release and latest tags
       - name: Build Docker Image
         run: |
-          docker build -t ${{ secrets.DOCKER_USERNAME }}/fastcve:${{ github.ref_name }} \
+          docker build --build-arg APP_VERSION=${{ github.ref_name }} \
+                       -t ${{ secrets.DOCKER_USERNAME }}/fastcve:${{ github.ref_name }} \
                        -t ${{ secrets.DOCKER_USERNAME }}/fastcve:latest .
 
       # Step 5: Push Docker Image for both tags

Dockerfile

@@ -1,7 +1,9 @@
 FROM postgres:16-alpine3.19
 
-ENV FCDB_HOME=/fastcve FCDB_NAME=vuln_db POSTGRES_PASSWORD=POSTGRES_PASSWORD FCDB_USER= FCDB_PASS=
-ENV PATH $PATH:${FCDB_HOME}
+ARG APP_VERSION=0.1.0
+
+ENV APP_VERSION=${APP_VERSION} FCDB_HOME=/fastcve FCDB_NAME=vuln_db POSTGRES_PASSWORD= FCDB_USER= FCDB_PASS= 
+ENV PATH=${FCDB_HOME}:$PATH
 
 RUN apk add gcc g++ build-base python3-dev py3-pip
 

docker-compose.yml

@@ -3,7 +3,7 @@ services:
     # Application Database service
     #--------------------------------------------------------------------------
     fastcve:
-        image: "${FASTCVE_DOCKER_IMG}"
+        image: "${FASTCVE_DOCKER_IMG}:${FASTCVE_DOCKER_TAG}"
 
         container_name: fastcve
 
@@ -13,6 +13,9 @@ services:
             context: $PWD
             dockerfile: $PWD/Dockerfile
 
+            args:
+                APP_VERSION: ${FASTCVE_DOCKER_TAG:-0.1.0}
+
         environment:
             - INP_ENV_NAME=${INP_ENV_NAME}
             - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}

src/web/app.py

@@ -5,8 +5,10 @@
 from dependencies import get_app_cntxt
 from web.routers.search import router as router_search
 from web.models.search import StatusOutput
+import os
 
-app = FastAPI(title="FastCVE", description="fast, rich and API-based search for CVE and more (CPE, CWE, CAPEC)", version="0.1.0")
+version = os.getenv("APP_VERSION", "0.1.0")
+app = FastAPI(title="FastCVE", description="Fast, Rich and API-based search for CVE and more (CPE, CWE, CAPEC)", version=version)
 
 
 @app.get("/status", tags=['status'], name="DB status", response_model=StatusOutput)