docker-compose.yaml

services:
  sandcastle:
    image: ghcr.io/iosifache/sandcastle:main
    build:
      context: sandcastle
      network: host
      tags:
        - "sandcastle:latest"
    container_name: sandcastle
    ports:
      - "8000:8080"
    environment:
      - SANDCASTLE_RECOVERY_PASSPHRASE=secret
    profiles:
      - sandcastle
      - all

  dragon:
    image: owasp/threat-dragon:v2.1.1
    container_name: dragon
    ports:
      - "8001:3000"
    environment:
      # The envvars are set with this syntax because of docker/compose#3878.
      GITHUB_CLIENT_ID: 01234567890123456789
      GITHUB_CLIENT_SECRET: 0123456789abcdef0123456789abcdef0123456
      GITHUB_SCOPE: public_repo
      GITHUB_ENTERPRISE_HOSTNAME: optional_if_using_enterprise
      GITHUB_ENTERPRISE_PORT: optional_if_enterprise_and_non_standard
      GITHUB_ENTERPRISE_PROTOCOL: optional_if_enterprise_and_non_standard
      NODE_ENV: production
      SERVER_API_PROTOCOL: http
      ENCRYPTION_KEYS: '[{"isPrimary": true, "id": 0, "value": "11223344556677889900aabbccddeeff"}]'
      ENCRYPTION_JWT_SIGNING_KEY: asdfasdfasdf
      ENCRYPTION_JWT_REFRESH_SIGNING_KEY: fljasdlfkjadf
    profiles:
      - threat-modelling
      - all

  coder:
    image: ghcr.io/iosifache/coder:main
    build:
      context: tooling/coder
      tags:
        - "coder:latest"
    container_name: coder
    volumes:
      - ".:/home/coder/codebase:ro"
      - "./tooling:/home/coder/tooling:ro"
      - "./analysis:/home/coder/analysis"
    networks:
      default:
    ports:
      - "8002:8080"
    profiles:
      - static-analysis
      - all

  static-analysers:
    image: ghcr.io/iosifache/static-analysers:main
    build:
      context: tooling/static-analysers
      network: host
      tags:
        - "static-analysers:latest"
    container_name: static-analysers
    volumes:
      - ".:/root/codebase:ro"
      - "./.git:/root/codebase/.git:ro"
      - "./tooling:/root/tooling:ro"
      - "./analysis:/root/analysis"
    networks:
      default:
    profiles:
      - static-analysis
      - all

  aflplusplus:
    image: ghcr.io/iosifache/aflplusplus:main
    build:
      context: tooling/aflplusplus
      network: host
      tags:
        - "aflplusplus:latest"
    container_name: aflplusplus
    volumes:
      - ".:/root/codebase:ro"
      - "./tooling:/root/tooling:ro"
      - "./analysis:/root/analysis"
    networks:
      default:
    profiles:
      - dynamic-analysis
      - all

  klee:
    image: klee/klee:latest
    container_name: klee
    command: tail -f /dev/null
    ulimits:
      stack: -1
    volumes:
      - ".:/root/codebase:ro"
      - "./tooling:/root/tooling:ro"
      - "./analysis:/root/analysis"
    networks:
      default:
    profiles:
      - dynamic-analysis
      - all