yellow

~ opinionated web scanning pipeline for pentesters in a hurry

git clone https://github.com/djnnvx/yellow.git

commit 4088bb59142fccc3fdf09f82363ad8a3700db332
parent 0faa59665d25cd14ed63f529f50577667b8b5de5
Author: djnn <[email protected]>
Date: Sun, 2 Aug 2026 14:51:34 +0900

fix(docker): multi-stage image with chromium, CGO off

Diffstat:

Dockerfile

+++++++++++++----

1 file changed, 13 insertions(+), 4 deletions(-)

diff --git a/Dockerfile b/Dockerfile
@@ -1,11 +1,11 @@
 FROM golang:1.26-alpine AS builder
 
+ENV CGO_ENABLED=0
+
 WORKDIR /app
 RUN apk update --no-cache && \
     apk upgrade --no-cache && \
-    apk add --no-cache \
-    make \
-    build-base
+    apk add --no-cache make
 
 COPY go.mod go.sum ./
 RUN go mod download
@@ -13,4 +13,13 @@ RUN go mod download
 COPY . .
 RUN make
 
-ENTRYPOINT [ "/app/yellow" ]
+FROM alpine:3.21
+
+RUN apk add --no-cache \
+    chromium \
+    ca-certificates
+
+COPY --from=builder /app/yellow /usr/local/bin/yellow
+
+WORKDIR /loot
+ENTRYPOINT [ "/usr/local/bin/yellow" ]