Build a ci-local tagged version of the parser sdk which is then used by the hook builds

Closes #11

Author: J12934

.github/workflows/ci.yaml

@@ -102,6 +102,7 @@ jobs:
           path: ./parser-sdk/nodejs/
           tag_with_ref: true
           tag_with_sha: true
+          tags: "ci-local"
       # Actual Parsers
       - uses: docker/build-push-action@v1
         name: "Build & Push Amass Parser Image"
@@ -112,6 +113,7 @@ jobs:
           path: ./scanner/amass/parser/
           tag_with_ref: true
           tag_with_sha: true
+          build_args: baseImageTag=ci-local
       - uses: docker/build-push-action@v1
         name: "Build & Push kube-hunter Parser Image"
         with:
@@ -121,6 +123,7 @@ jobs:
           path: ./scanner/kube-hunter/parser/
           tag_with_ref: true
           tag_with_sha: true
+          build_args: baseImageTag=ci-local
       - uses: docker/build-push-action@v1
         name: "Build & Push Nikto Parser Image"
         with:
@@ -130,6 +133,7 @@ jobs:
           path: ./scanner/nikto/parser/
           tag_with_ref: true
           tag_with_sha: true
+          build_args: baseImageTag=ci-local
       - uses: docker/build-push-action@v1
         name: "Build & Push Nmap Parser Image"
         with:
@@ -139,6 +143,7 @@ jobs:
           path: ./scanner/nmap/parser/
           tag_with_ref: true
           tag_with_sha: true
+          build_args: baseImageTag=ci-local
       - uses: docker/build-push-action@v1
         name: "Build & Push ssh_scan Parser Image"
         with:
@@ -148,6 +153,7 @@ jobs:
           path: ./scanner/ssh_scan/parser/
           tag_with_ref: true
           tag_with_sha: true
+          build_args: baseImageTag=ci-local
       - uses: docker/build-push-action@v1
         name: "Build & Push SSLyze Parser Image"
         with:
@@ -157,6 +163,7 @@ jobs:
           path: ./scanner/sslyze/parser/
           tag_with_ref: true
           tag_with_sha: true
+          build_args: baseImageTag=ci-local
       - uses: docker/build-push-action@v1
         name: "Build & Push test-scan Parser Image"
         with:
@@ -166,6 +173,7 @@ jobs:
           path: ./scanner/test-scan/parser/
           tag_with_ref: true
           tag_with_sha: true
+          build_args: baseImageTag=ci-local
       - uses: docker/build-push-action@v1
         name: "Build & Push Trivy Parser Image"
         with:
@@ -175,6 +183,7 @@ jobs:
           path: ./scanner/trivy/parser/
           tag_with_ref: true
           tag_with_sha: true
+          build_args: baseImageTag=ci-local
       - uses: docker/build-push-action@v1
         name: "Build & Push OWASP Zap Parser Image"
         with:
@@ -184,6 +193,7 @@ jobs:
           path: ./scanner/zap/parser/
           tag_with_ref: true
           tag_with_sha: true
+          build_args: baseImageTag=ci-local
   hookImages:
     name: "Build / Hooks"
     runs-on: ubuntu-latest

scanner/amass/parser/Dockerfile

@@ -1,3 +1,4 @@
-FROM scbexperimental/parser-sdk-nodejs:latest
+ARG baseImageTag
+FROM scbexperimental/parser-sdk-nodejs:${baseImageTag:-latest}
 WORKDIR /home/app/parser-wrapper/parser/
 COPY --chown=app:app ./parser.js ./parser.js

scanner/kube-hunter/parser/Dockerfile

@@ -1,3 +1,4 @@
-FROM scbexperimental/parser-sdk-nodejs:latest
+ARG baseImageTag
+FROM scbexperimental/parser-sdk-nodejs:${baseImageTag:-latest}
 WORKDIR /home/app/parser-wrapper/parser/
 COPY --chown=app:app ./parser.js ./parser.js

scanner/nikto/parser/Dockerfile

@@ -1,3 +1,4 @@
-FROM scbexperimental/parser-sdk-nodejs:latest
+ARG baseImageTag
+FROM scbexperimental/parser-sdk-nodejs:${baseImageTag:-latest}
 WORKDIR /home/app/parser-wrapper/parser/
 COPY --chown=app:app ./parser.js ./parser.js

scanner/nmap/parser/Dockerfile

@@ -1,10 +1,11 @@
+ARG baseImageTag
 FROM node:12-alpine as build
 RUN mkdir -p /home/app
 WORKDIR /home/app
 COPY package.json package-lock.json ./
 RUN npm ci --production
 
-FROM scbexperimental/parser-sdk-nodejs:latest
+FROM scbexperimental/parser-sdk-nodejs:${baseImageTag:-latest}
 WORKDIR /home/app/parser-wrapper/parser/
 COPY --from=build --chown=app:app /home/app/node_modules/ ./node_modules/
 COPY --chown=app:app ./parser.js ./parser.js

scanner/ssh_scan/parser/Dockerfile

@@ -1,3 +1,4 @@
-FROM scbexperimental/parser-sdk-nodejs:latest
+ARG baseImageTag
+FROM scbexperimental/parser-sdk-nodejs:${baseImageTag:-latest}
 WORKDIR /home/app/parser-wrapper/parser/
 COPY --chown=app:app ./parser.js ./parser.js

scanner/sslyze/parser/Dockerfile

@@ -1,10 +1,11 @@
+ARG baseImageTag
 FROM node:12-alpine as build
 RUN mkdir -p /home/app
 WORKDIR /home/app
 COPY package.json package-lock.json ./
 RUN npm ci --production
 
-FROM scbexperimental/parser-sdk-nodejs:latest
+FROM scbexperimental/parser-sdk-nodejs:${baseImageTag:-latest}
 WORKDIR /home/app/parser-wrapper/parser/
 COPY --from=build --chown=app:app /home/app/node_modules/ ./node_modules/
 COPY --chown=app:app ./parser.js ./parser.js

scanner/test-scan/parser/Dockerfile

@@ -1,10 +1,11 @@
+ARG baseImageTag
 FROM node:12-alpine as build
 RUN mkdir -p /home/app
 WORKDIR /home/app
 COPY package.json package-lock.json ./
 RUN npm ci --production
 
-FROM scbexperimental/parser-sdk-nodejs:latest
+FROM scbexperimental/parser-sdk-nodejs:${baseImageTag:-latest}
 WORKDIR /home/app/parser-wrapper/parser/
 COPY --from=build --chown=app:app /home/app/node_modules/ ./node_modules/
 COPY --chown=app:app ./parser.js ./parser.js

scanner/trivy/parser/Dockerfile

@@ -1,3 +1,4 @@
-FROM scbexperimental/parser-sdk-nodejs:latest
+ARG baseImageTag
+FROM scbexperimental/parser-sdk-nodejs:${baseImageTag:-latest}
 WORKDIR /home/app/parser-wrapper/parser/
 COPY --chown=app:app ./parser.js ./parser.js

scanner/wpscan/parser/Dockerfile

@@ -1,3 +1,4 @@
-FROM scbexperimental/parser-sdk-nodejs:latest
+ARG baseImageTag
+FROM scbexperimental/parser-sdk-nodejs:${baseImageTag:-latest}
 WORKDIR /home/app/parser-wrapper/parser/
 COPY --chown=app:app ./parser.js ./parser.js