add non-vulnerable dockerfile

roo-ahine · Jan 30, 2025 · 60acf38 · 60acf38
1 parent a048acf
commit 60acf38
Show file tree

Hide file tree

Showing 4 changed files with 14 additions and 11 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -1,11 +1,3 @@
-# trigger test
-FROM public.ecr.aws/docker/library/maven:3.8.4-jdk-8
-
-COPY . /usr/src/poc
-WORKDIR /usr/src/poc
-RUN mvn clean && mvn package
-
-# set this to disable the exploit
-#ENV LOG4J_FORMAT_MSG_NO_LOOKUPS=true
-ENV SECRET_VALUE='if you can read this this code is vulnerable'
-CMD ["java", "-jar", "/usr/src/poc/target/log4j-rce-1.0-SNAPSHOT-jar-with-dependencies.jar"]
+FROM scratch
+COPY hello /
+CMD ["/hello"]
diff --git a/vulnerable_log4j_docker/Dockerfile b/vulnerable_log4j_docker/Dockerfile
@@ -0,0 +1,11 @@
+# trigger test
+FROM public.ecr.aws/docker/library/maven:3.8.4-jdk-8
+
+COPY . /usr/src/poc
+WORKDIR /usr/src/poc
+RUN mvn clean && mvn package
+
+# set this to disable the exploit
+#ENV LOG4J_FORMAT_MSG_NO_LOOKUPS=true
+ENV SECRET_VALUE='if you can read this this code is vulnerable'
+CMD ["java", "-jar", "/usr/src/poc/target/log4j-rce-1.0-SNAPSHOT-jar-with-dependencies.jar"]
diff --git a/pom.xml → vulnerable_log4j_docker/pom.xml b/pom.xml → vulnerable_log4j_docker/pom.xml
diff --git a/src/main/java/MyExample.java → ...log4j_docker/src/main/java/MyExample.java b/src/main/java/MyExample.java → ...log4j_docker/src/main/java/MyExample.java