BloodHound icon indicating copy to clipboard operation
BloodHound copied to clipboard

Feature: Docker - Add slim Image without sharphound and azurehound binaries

Open firefart opened this issue 9 months ago • 0 comments

Feature Description

Currently the sharphound and azurehound binaries are included in the docker image. This can be problematic when trying to run just the web app in an enterprise environment, as various systems like docker caching registries, web proxies, ... will flag the corresponding docker layers as malware. It would be great to have a slim version of the app without those binaries. This would require that scans can only be uploaded manually and not be triggered through the app, but this should be trivial to implement (binary accessible == feature enabled, otherwise disabled). PS: Creating a new image based on the published one does not work, as the base image contains the flagged binaries too.

Are you intending to implement this feature?

I can send a PR if the feature is approved, but would like your feedback first

Current Behavior

Currently pulling this image triggers various antivirus scanners because of the included binaries

Desired Behavior

A -slim image without those binaries, just to run the webapp. To have a better use experience, the scan features from the app should be disabled in this case.

Use Case

I only want to run the bloodhound ce webapp, and upload the sharp and azurehound results manually

Implementation Suggestions

Provide an additional slim image without the binaries. This would leave the current images unchanged and only introduce a new image

firefart avatar Mar 24 '25 15:03 firefart