Initial commit: AASRT v1.0.0 - AI Agent Security Reconnaissance Tool

Dockerfile

@@ -0,0 +1,85 @@
+# =============================================================================
+# AASRT - AI Agent Security Reconnaissance Tool
+# Production Dockerfile with Multi-Stage Build
+# =============================================================================
+
+# -----------------------------------------------------------------------------
+# Stage 1: Builder - Install dependencies and prepare application
+# -----------------------------------------------------------------------------
+FROM python:3.13-slim AS builder
+
+# Set build-time environment variables
+ENV PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONUNBUFFERED=1 \
+    PIP_NO_CACHE_DIR=1 \
+    PIP_DISABLE_PIP_VERSION_CHECK=1
+
+WORKDIR /app
+
+# Install build dependencies
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    build-essential \
+    && rm -rf /var/lib/apt/lists/*
+
+# Copy requirements first for layer caching
+COPY requirements.txt .
+
+# Install Python dependencies to a virtual environment
+RUN python -m venv /opt/venv
+ENV PATH="/opt/venv/bin:$PATH"
+RUN pip install --upgrade pip && \
+    pip install -r requirements.txt
+
+# -----------------------------------------------------------------------------
+# Stage 2: Runtime - Minimal production image
+# -----------------------------------------------------------------------------
+FROM python:3.13-slim AS runtime
+
+# Labels for container identification
+LABEL maintainer="AASRT Team" \
+      version="1.0.0" \
+      description="AI Agent Security Reconnaissance Tool - Production Image"
+
+# Security: Run as non-root user
+RUN groupadd --gid 1000 aasrt && \
+    useradd --uid 1000 --gid aasrt --shell /bin/bash --create-home aasrt
+
+# Set runtime environment variables
+ENV PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONUNBUFFERED=1 \
+    PYTHONPATH=/app \
+    # Application configuration
+    AASRT_ENVIRONMENT=production \
+    AASRT_LOG_LEVEL=INFO \
+    # Streamlit configuration
+    STREAMLIT_SERVER_PORT=8501 \
+    STREAMLIT_SERVER_ADDRESS=0.0.0.0 \
+    STREAMLIT_SERVER_HEADLESS=true \
+    STREAMLIT_BROWSER_GATHER_USAGE_STATS=false
+
+WORKDIR /app
+
+# Copy virtual environment from builder
+COPY --from=builder /opt/venv /opt/venv
+ENV PATH="/opt/venv/bin:$PATH"
+
+# Copy application code
+COPY --chown=aasrt:aasrt . .
+
+# Create necessary directories with correct permissions
+RUN mkdir -p /app/data /app/logs /app/reports && \
+    chown -R aasrt:aasrt /app/data /app/logs /app/reports
+
+# Switch to non-root user
+USER aasrt
+
+# Expose Streamlit port
+EXPOSE 8501
+
+# Health check
+HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
+    CMD curl -f http://localhost:8501/_stcore/health || exit 1
+
+# Default command: Run Streamlit web interface
+CMD ["streamlit", "run", "app.py", "--server.port=8501", "--server.address=0.0.0.0"]
+