Dockerfile

FROM python:3.9-alpine AS osv-scanner-builder
WORKDIR /app
# Install osv-scanner
RUN apk update && \
    apk add osv-scanner

FROM maven:3.6.3-openjdk-11-slim As oat_builder
WORKDIR /app
# Install oat_tool 
Run apt update && apt install -y git && \ 
    git clone https://gitee.com/openharmony-sig/tools_oat.git && \
    cd tools_oat && git checkout tags/v2.0.0 && mvn package

# FROM golang:latest
# WORKDIR /app
# RUN go install github.com/google/osv-scanner/cmd/osv-scanner@v1

FROM python:3.9-buster
WORKDIR /app

# Copy osv-scanner binary
COPY --from=osv-scanner-builder /usr/bin/osv-scanner /usr/bin/osv-scanner
COPY --from=osv-scanner-builder /lib/ld-musl-x86_64.so.1 /lib/ld-musl-x86_64.so.1
COPY --from=oat_builder /app/tools_oat/target/ohos_ossaudittool-2.0.0.jar /app/ohos_ossaudittool-2.0.0.jar
COPY --from=oat_builder /app/tools_oat/target/libs /app/libs
RUN ln -s /lib/ld-musl-x86_64.so.1 /lib/libc.musl-x86_64.so.1

# Install scancode
ARG SCANCODE_VERSION=32.1.0
RUN apt-get update && apt-get install -y libbz2-1.0 xz-utils zlib1g libxml2-dev libxslt1-dev libpopt0 && \
    curl -L \
    https://github.com/nexB/scancode-toolkit/releases/download/v${SCANCODE_VERSION}/scancode-toolkit-v${SCANCODE_VERSION}_py3.9-linux.tar.gz \
    --output /opt/scancode.tar.gz && \
    cd /opt && tar -xzf scancode.tar.gz && \
    echo "$(which python)" > scancode-toolkit-v${SCANCODE_VERSION}/PYTHON_EXECUTABLE && \
    ln -s /usr/bin/python3 /usr/bin/python3.9 && \
    cd scancode-toolkit-v${SCANCODE_VERSION}/ && ./configure && \
    ln -s /opt/scancode-toolkit-v${SCANCODE_VERSION}/scancode /usr/bin/scancode && \
    rm /opt/scancode.tar.gz

# Install SonarScanner CLI
RUN cd /opt && wget https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-6.1.0.4477-linux-x64.zip && \
    unzip sonar-scanner-cli-6.1.0.4477-linux-x64.zip && \
    ln -s /opt/sonar-scanner-6.1.0.4477-linux-x64/bin/sonar-scanner /usr/bin/sonar-scanner && \
    rm sonar-scanner-cli-6.1.0.4477-linux-x64.zip

# Install ORT(opensource-review-toolkit)
RUN cd /opt && wget https://github.com/oss-review-toolkit/ort/releases/download/25.0.0/ort-25.0.0.zip && \
    unzip ort-25.0.0.zip && \
    ln -s /opt/ort-25.0.0/bin/ort /usr/bin/ort && \
    rm ort-25.0.0.zip

# Install Ruby, Java, nodejs and other packages manager
SHELL ["/bin/bash", "-l", "-c"]
RUN gpg --keyserver keyserver.ubuntu.com --recv-keys 409B6B1796C275462A1703113804BB82D39DC0E3 7D2BAF1CF37B13E2069D6956105BD0E739499BDB && \
    curl -sSL https://get.rvm.io | bash -s stable && source /etc/profile.d/rvm.sh && \
    rvm install 3.1.6 && \
    apt-get update && \
    apt-get install -y build-essential cmake pkg-config libicu-dev zlib1g-dev libcurl4-openssl-dev libssl-dev ruby-dev && \
    gem install github-linguist cocoapods && \
    echo "deb https://repo.scala-sbt.org/scalasbt/debian all main" | tee /etc/apt/sources.list.d/sbt.list && \
    echo "deb https://repo.scala-sbt.org/scalasbt/debian /" | tee /etc/apt/sources.list.d/sbt_old.list && \
    curl -sL "https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x2EE0EA64E40A89B84B2DF73499E82A75642AC823" | apt-key add && \
    apt-get update && \
    apt-get install -y openjdk-11-jdk && \
    curl -sL https://deb.nodesource.com/setup_18.x | bash - && \
    apt-get install -y nodejs build-essential sbt ruby-licensee && \
    npm install -g pnpm yarn bower

# Install ohpm_cli_tool
RUN cd /opt && git clone --depth=1 https://github.com/Laniakea2012/ohpm_cli_tool.git && \
    ln -s /opt/ohpm_cli_tool/bin/ohpm /usr/bin/ohpm && \
    ln -s /opt/ohpm_cli_tool/bin/pm-cli.js /usr/bin/pm-cli.js

COPY . .
RUN chmod a+x scripts/entrypoint.sh && \
    pip install --upgrade pip && pip install --no-cache-dir -r requirements.txt && \
    pip install --upgrade urllib3

ENTRYPOINT ["/app/scripts/entrypoint.sh"]
CMD ["python", "openchecker/main.py"]