mirror of
https://github.com/data-privacy-stack/presidio.git
synced 2026-07-25 20:30:53 -05:00
45b37ffcff
* Initial plan * Pin GitHub Actions and Docker images to specific hashes for security Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com> * Pin pip, poetry, and other build tool versions for security Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com> * Add comprehensive dependency pinning security documentation Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com> * Fix CI: Replace incorrect setup-python SHA with v6 tag Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com> * Update dependency pinning docs to reflect pragmatic approach Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com> * Fix CI: Replace invalid codeql-action and security-devops-action SHAs with version tags Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com> * Update docs to list all actions using version tags Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com> * Fix CI: Replace invalid py-cov-action SHA with version tag Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com> * Update docs to include py-cov-action in version tag list Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com> * Remove DEPENDENCY_PINNING.md as requested by maintainer Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com> * Pin actions/setup-python to commit SHA e797f83 (v6.0.0) Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com> * Pin codeql-action, security-devops-action, and py-cov-action to commit SHAs Co-authored-by: tamirkamara <26870601+tamirkamara@users.noreply.github.com> * Remove all pip upgrade commands as requested Co-authored-by: tamirkamara <26870601+tamirkamara@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com> Co-authored-by: Sharon Hart <sharonh.dev@gmail.com> Co-authored-by: tamirkamara <26870601+tamirkamara@users.noreply.github.com>
32 lines
892 B
Docker
32 lines
892 B
Docker
FROM python:3.10-slim@sha256:e508a34e5491225a76fbb9e0f43ebde1f691c6a689d096d7510cf7fb17d4ba6f
|
|
|
|
RUN apt-get update && apt-get install -y \
|
|
build-essential \
|
|
curl \
|
|
software-properties-common \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
WORKDIR /code
|
|
|
|
COPY ./requirements.txt /code/requirements.txt
|
|
|
|
RUN pip3 install -r requirements.txt
|
|
RUN pip3 install https://huggingface.co/spacy/en_core_web_sm/resolve/main/en_core_web_sm-any-py3-none-any.whl
|
|
RUN pip3 install https://huggingface.co/spacy/en_core_web_lg/resolve/main/en_core_web_lg-any-py3-none-any.whl
|
|
|
|
EXPOSE 7860
|
|
|
|
COPY . /code
|
|
|
|
RUN useradd -m -u 1000 user
|
|
USER user
|
|
ENV HOME=/home/user \
|
|
PATH=/home/user/.local/bin:$PATH
|
|
|
|
WORKDIR $HOME/app
|
|
|
|
COPY --chown=user . $HOME/app
|
|
|
|
HEALTHCHECK CMD curl --fail http://localhost:7860/_stcore/health
|
|
|
|
CMD python -m streamlit run presidio_streamlit.py --server.port=7860 --server.address=0.0.0.0 |