ghcr.io/lintsinghua/deepaudit-sandbox:latest linux/amd64

Docker拉取命令

docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/lintsinghua/deepaudit-sandbox:latest
docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/lintsinghua/deepaudit-sandbox:latest  ghcr.io/lintsinghua/deepaudit-sandbox:latest

Containerd拉取命令

ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/lintsinghua/deepaudit-sandbox:latest
ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/lintsinghua/deepaudit-sandbox:latest  ghcr.io/lintsinghua/deepaudit-sandbox:latest

Shell快速替换命令

sed -i 's#ghcr.io/lintsinghua/deepaudit-sandbox:latest#swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/lintsinghua/deepaudit-sandbox:latest#' deployment.yaml

Ansible快速分发-Docker

#ansible k8s -m shell -a 'docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/lintsinghua/deepaudit-sandbox:latest && docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/lintsinghua/deepaudit-sandbox:latest  ghcr.io/lintsinghua/deepaudit-sandbox:latest'

Ansible快速分发-Containerd

#ansible k8s -m shell -a 'ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/lintsinghua/deepaudit-sandbox:latest && ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/lintsinghua/deepaudit-sandbox:latest  ghcr.io/lintsinghua/deepaudit-sandbox:latest'

镜像构建历史

# 2026-01-23 13:01:54  0.00B 设置默认要执行的命令
CMD ["/bin/bash"]
                        
# 2026-01-23 13:01:54  0.00B 设置工作目录为/workspace
WORKDIR /workspace
                        
# 2026-01-23 13:01:54  0.00B 指定运行容器时使用的用户
USER sandbox
                        
# 2026-01-23 13:01:54  0.00B 设置环境变量 PYTHONPATH
ENV PYTHONPATH=/workspace
                        
# 2026-01-23 13:01:54  0.00B 设置环境变量 PYTHONUNBUFFERED
ENV PYTHONUNBUFFERED=1
                        
# 2026-01-23 13:01:54  0.00B 设置环境变量 PYTHONDONTWRITEBYTECODE
ENV PYTHONDONTWRITEBYTECODE=1
                        
# 2026-01-23 13:01:54  0.00B 设置环境变量 PATH
ENV PATH=/home/sandbox/.local/bin:/usr/local/cargo/bin:/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/go/bin
                        
# 2026-01-23 13:01:54  0.00B 设置环境变量 HOME
ENV HOME=/home/sandbox
                        
# 2026-01-23 13:01:54  0.00B 执行命令并创建新的镜像层
RUN /bin/sh -c mkdir -p /workspace /tmp/sandbox &&     chown -R sandbox:sandbox /workspace /tmp/sandbox # buildkit
                        
# 2026-01-23 13:01:54  332.12KB 执行命令并创建新的镜像层
RUN /bin/sh -c groupadd -g 1000 sandbox &&     useradd -u 1000 -g sandbox -m -s /bin/bash sandbox # buildkit
                        
# 2026-01-23 13:01:54  19.78MB 执行命令并创建新的镜像层
RUN /bin/sh -c unset http_proxy https_proxy HTTP_PROXY HTTPS_PROXY &&     curl -L https://github.com/google/osv-scanner/releases/download/v1.6.2/osv-scanner_1.6.2_linux_amd64 -o /usr/local/bin/osv-scanner &&     chmod +x /usr/local/bin/osv-scanner # buildkit
                        
# 2026-01-23 13:01:53  34.32MB 执行命令并创建新的镜像层
RUN /bin/sh -c unset http_proxy https_proxy HTTP_PROXY HTTPS_PROXY &&     curl -sSfL https://raw.githubusercontent.com/trufflesecurity/trufflehog/main/scripts/install.sh | sh -s -- -b /usr/local/bin # buildkit
                        
# 2026-01-23 13:01:52  6.93MB 执行命令并创建新的镜像层
RUN /bin/sh -c unset http_proxy https_proxy HTTP_PROXY HTTPS_PROXY &&     curl -L https://github.com/gitleaks/gitleaks/releases/download/v8.18.2/gitleaks_8.18.2_linux_x64.tar.gz -o gitleaks.tar.gz &&     tar -xzf gitleaks.tar.gz &&     mv gitleaks /usr/local/bin/ &&     rm gitleaks.tar.gz # buildkit
                        
# 2026-01-23 13:01:51  366.49MB 执行命令并创建新的镜像层
RUN /bin/sh -c unset http_proxy https_proxy HTTP_PROXY HTTPS_PROXY &&     pip install --no-cache-dir -i https://pypi.tuna.tsinghua.edu.cn/simple     requests     httpx     aiohttp     beautifulsoup4     lxml     pycryptodome     paramiko     pyjwt     python-jose     sqlparse     semgrep     bandit     safety # buildkit
                        
# 2026-01-23 13:00:13  620.38MB 执行命令并创建新的镜像层
RUN /bin/sh -c unset http_proxy https_proxy HTTP_PROXY HTTPS_PROXY &&     curl --proto '=https' --tlsv1.2 -sSf https://rsproxy.cn/rustup-init.sh | sh -s -- -y --default-toolchain stable --profile minimal &&     chmod -R a+w /usr/local/cargo # buildkit
                        
# 2026-01-23 12:59:18  0.00B 设置环境变量 RUSTUP_HOME CARGO_HOME PATH RUSTUP_DIST_SERVER RUSTUP_UPDATE_ROOT
ENV RUSTUP_HOME=/usr/local/rustup CARGO_HOME=/usr/local/cargo PATH=/usr/local/cargo/bin:/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/go/bin RUSTUP_DIST_SERVER=https://rsproxy.cn RUSTUP_UPDATE_ROOT=https://rsproxy.cn/rustup
                        
# 2026-01-23 12:59:18  213.79MB 执行命令并创建新的镜像层
RUN /bin/sh -c unset http_proxy https_proxy HTTP_PROXY HTTPS_PROXY &&     curl -L https://mirrors.aliyun.com/golang/go1.21.6.linux-amd64.tar.gz -o go.tar.gz &&     tar -C /usr/local -xzf go.tar.gz &&     rm go.tar.gz # buildkit
                        
# 2026-01-23 12:59:14  0.00B 设置环境变量 GOPROXY
ENV GOPROXY=https://goproxy.cn,direct
                        
# 2026-01-23 12:59:14  0.00B 设置环境变量 PATH
ENV PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/go/bin
                        
# 2026-01-23 12:59:14  206.89MB 执行命令并创建新的镜像层
RUN /bin/sh -c unset http_proxy https_proxy HTTP_PROXY HTTPS_PROXY &&     curl -fsSL https://deb.nodesource.com/setup_20.x | bash -     && apt-get install -y nodejs     && npm config set registry https://registry.npmmirror.com     && rm -rf /var/lib/apt/lists/* # buildkit
                        
# 2026-01-23 12:59:01  702.22MB 执行命令并创建新的镜像层
RUN /bin/sh -c unset http_proxy https_proxy HTTP_PROXY HTTPS_PROXY &&     sed -i 's/deb.debian.org/mirrors.aliyun.com/g' /etc/apt/sources.list &&     sed -i 's/security.debian.org/mirrors.aliyun.com/g' /etc/apt/sources.list &&     apt-get update && apt-get install -y --no-install-recommends     curl     wget     netcat-openbsd     dnsutils     iputils-ping     ca-certificates     git     unzip     jq     php-cli     openjdk-11-jdk-headless     ruby-full     build-essential     cmake     clang     llvm     && rm -rf /var/lib/apt/lists/* # buildkit
                        
# 2026-01-23 12:59:01  0.00B 添加元数据标签
LABEL description=Secure sandbox environment for vulnerability verification and security scanning
                        
# 2026-01-23 12:59:01  0.00B 添加元数据标签
LABEL maintainer=XCodeReviewer Team
                        
# 2025-06-04 07:02:53  0.00B 设置默认要执行的命令
CMD ["python3"]
                        
# 2025-06-04 07:02:53  36.00B 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux; 	for src in idle3 pip3 pydoc3 python3 python3-config; do 		dst="$(echo "$src" | tr -d 3)"; 		[ -s "/usr/local/bin/$src" ]; 		[ ! -e "/usr/local/bin/$dst" ]; 		ln -svT "$src" "/usr/local/bin/$dst"; 	done # buildkit
                        
# 2025-06-04 07:02:53  72.64MB 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux; 		wget -O python.tar.xz "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz"; 	echo "$PYTHON_SHA256 *python.tar.xz" | sha256sum -c -; 	wget -O python.tar.xz.asc "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz.asc"; 	GNUPGHOME="$(mktemp -d)"; export GNUPGHOME; 	gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$GPG_KEY"; 	gpg --batch --verify python.tar.xz.asc python.tar.xz; 	gpgconf --kill all; 	rm -rf "$GNUPGHOME" python.tar.xz.asc; 	mkdir -p /usr/src/python; 	tar --extract --directory /usr/src/python --strip-components=1 --file python.tar.xz; 	rm python.tar.xz; 		cd /usr/src/python; 	gnuArch="$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)"; 	./configure 		--build="$gnuArch" 		--enable-loadable-sqlite-extensions 		--enable-optimizations 		--enable-option-checking=fatal 		--enable-shared 		$(test "$gnuArch" != 'riscv64-linux-musl' && echo '--with-lto') 		--with-ensurepip 	; 	nproc="$(nproc)"; 	EXTRA_CFLAGS="$(dpkg-buildflags --get CFLAGS)"; 	LDFLAGS="$(dpkg-buildflags --get LDFLAGS)"; 	make -j "$nproc" 		"EXTRA_CFLAGS=${EXTRA_CFLAGS:-}" 		"LDFLAGS=${LDFLAGS:-}" 	; 	rm python; 	make -j "$nproc" 		"EXTRA_CFLAGS=${EXTRA_CFLAGS:-}" 		"LDFLAGS=${LDFLAGS:--Wl},-rpath='\$\$ORIGIN/../lib'" 		python 	; 	make install; 		bin="$(readlink -ve /usr/local/bin/python3)"; 	dir="$(dirname "$bin")"; 	mkdir -p "/usr/share/gdb/auto-load/$dir"; 	cp -vL Tools/gdb/libpython.py "/usr/share/gdb/auto-load/$bin-gdb.py"; 		cd /; 	rm -rf /usr/src/python; 		find /usr/local -depth 		\( 			\( -type d -a \( -name test -o -name tests -o -name idle_test \) \) 			-o \( -type f -a \( -name '*.pyc' -o -name '*.pyo' -o -name 'libpython*.a' \) \) 		\) -exec rm -rf '{}' + 	; 		ldconfig; 		export PYTHONDONTWRITEBYTECODE=1; 	python3 --version; 		pip3 install 		--disable-pip-version-check 		--no-cache-dir 		--no-compile 		'setuptools==65.5.1' 		'wheel<0.46' 	; 	pip3 --version # buildkit
                        
# 2025-06-04 07:02:53  0.00B 设置环境变量 PYTHON_SHA256
ENV PYTHON_SHA256=8fb5f9fbc7609fa822cb31549884575db7fd9657cbffb89510b5d7975963a83a
                        
# 2025-06-04 07:02:53  0.00B 设置环境变量 PYTHON_VERSION
ENV PYTHON_VERSION=3.11.13
                        
# 2025-06-04 07:02:53  0.00B 设置环境变量 GPG_KEY
ENV GPG_KEY=A035C8C19219BA821ECEA86B64E628F8D684696D
                        
# 2025-06-04 07:02:53  17.59MB 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux; 	apt-get update; 	apt-get install -y --no-install-recommends 		libbluetooth-dev 		tk-dev 		uuid-dev 	; 	rm -rf /var/lib/apt/lists/* # buildkit
                        
# 2025-06-04 07:02:53  0.00B 设置环境变量 LANG
ENV LANG=C.UTF-8
                        
# 2025-06-04 07:02:53  0.00B 设置环境变量 PATH
ENV PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
                        
# 2024-01-09 09:14:25  529.25MB 执行命令并创建新的镜像层
RUN /bin/sh -c set -ex; 	apt-get update; 	apt-get install -y --no-install-recommends 		autoconf 		automake 		bzip2 		default-libmysqlclient-dev 		dpkg-dev 		file 		g++ 		gcc 		imagemagick 		libbz2-dev 		libc6-dev 		libcurl4-openssl-dev 		libdb-dev 		libevent-dev 		libffi-dev 		libgdbm-dev 		libglib2.0-dev 		libgmp-dev 		libjpeg-dev 		libkrb5-dev 		liblzma-dev 		libmagickcore-dev 		libmagickwand-dev 		libmaxminddb-dev 		libncurses5-dev 		libncursesw5-dev 		libpng-dev 		libpq-dev 		libreadline-dev 		libsqlite3-dev 		libssl-dev 		libtool 		libwebp-dev 		libxml2-dev 		libxslt-dev 		libyaml-dev 		make 		patch 		unzip 		xz-utils 		zlib1g-dev 	; 	rm -rf /var/lib/apt/lists/* # buildkit
                        
# 2024-01-09 09:14:25  152.25MB 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux; 	apt-get update; 	apt-get install -y --no-install-recommends 		git 		mercurial 		openssh-client 		subversion 				procps 	; 	rm -rf /var/lib/apt/lists/* # buildkit
                        
# 2023-04-29 05:58:08  28.61MB 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux; 	apt-get update; 	apt-get install -y --no-install-recommends 		ca-certificates 		curl 		gnupg 		netbase 		wget 	; 	rm -rf /var/lib/apt/lists/* # buildkit
                        
# 2023-04-29 05:58:08  124.31MB 
# debian.sh --arch 'amd64' out/ 'bullseye' '@1753056000'
                        
                    

镜像信息

{
    "Id": "sha256:13485acc8e738f26756e37cd4f495a8f637f00164f31869c9577a0e48a1a17cc",
    "RepoTags": [
        "ghcr.io/lintsinghua/deepaudit-sandbox:latest",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/lintsinghua/deepaudit-sandbox:latest"
    ],
    "RepoDigests": [
        "ghcr.io/lintsinghua/deepaudit-sandbox@sha256:7659e436a95ce9a7bd2951736d8bcebee13644399cec271d1354bf26b5cbbd05",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/lintsinghua/deepaudit-sandbox@sha256:b939b2864245e30bd9d00106252c8a19632e23c97246f34fd14c341329a8b1f6"
    ],
    "Parent": "",
    "Comment": "buildkit.dockerfile.v0",
    "Created": "2026-01-23T05:01:54.167973388Z",
    "Container": "",
    "ContainerConfig": null,
    "DockerVersion": "",
    "Author": "",
    "Config": {
        "Hostname": "",
        "Domainname": "",
        "User": "sandbox",
        "AttachStdin": false,
        "AttachStdout": false,
        "AttachStderr": false,
        "Tty": false,
        "OpenStdin": false,
        "StdinOnce": false,
        "Env": [
            "PATH=/home/sandbox/.local/bin:/usr/local/cargo/bin:/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/go/bin",
            "LANG=C.UTF-8",
            "GPG_KEY=A035C8C19219BA821ECEA86B64E628F8D684696D",
            "PYTHON_VERSION=3.11.13",
            "PYTHON_SHA256=8fb5f9fbc7609fa822cb31549884575db7fd9657cbffb89510b5d7975963a83a",
            "GOPROXY=https://goproxy.cn,direct",
            "RUSTUP_HOME=/usr/local/rustup",
            "CARGO_HOME=/usr/local/cargo",
            "RUSTUP_DIST_SERVER=https://rsproxy.cn",
            "RUSTUP_UPDATE_ROOT=https://rsproxy.cn/rustup",
            "HOME=/home/sandbox",
            "PYTHONDONTWRITEBYTECODE=1",
            "PYTHONUNBUFFERED=1",
            "PYTHONPATH=/workspace"
        ],
        "Cmd": [
            "/bin/bash"
        ],
        "ArgsEscaped": true,
        "Image": "",
        "Volumes": null,
        "WorkingDir": "/workspace",
        "Entrypoint": null,
        "OnBuild": null,
        "Labels": {
            "description": "Secure sandbox environment for vulnerability verification and security scanning",
            "maintainer": "XCodeReviewer Team"
        }
    },
    "Architecture": "amd64",
    "Os": "linux",
    "Size": 3095798400,
    "GraphDriver": {
        "Data": {
            "LowerDir": "/var/lib/docker/overlay2/e30c9abc8686a80b692674513f5bb70cc522610ba38fcb763e8fb45ed17d27df/diff:/var/lib/docker/overlay2/04f0576161a77203589d225adb5e85dc013c9ef30d1126b3ecee1478727a725c/diff:/var/lib/docker/overlay2/2c6be54bd4041249de7f368a1612c516eb08439fbef7c83117b6acccfddeae7a/diff:/var/lib/docker/overlay2/05f00a10e1caf2ed13e4ede45d06f09ca787d1e09eb883cfd1d13ac04ba87b3a/diff:/var/lib/docker/overlay2/43a2beec62dba1a82831a7ad53c0f3bc378e8a6a0d8caa25a53869cc3ce39e85/diff:/var/lib/docker/overlay2/51cb4aee1fec6acd3cba3db8dc6529e7847007a4a5aa21129f4ede75189bbadb/diff:/var/lib/docker/overlay2/cecf3ce682dc0537f76b87a64998a92a33b95e6a60ad72ae72a51ad630e5d2d1/diff:/var/lib/docker/overlay2/4622dc5488331719fad5221a543c56e277d622540f0eeb53dda3b18b325cbf22/diff:/var/lib/docker/overlay2/bfed3a8f1f31c94033cda838b94e2b9431a57bc09c35aaaf182e53144c405fbc/diff:/var/lib/docker/overlay2/d331af6294a914b1adddd48f1b95bc5ddfe591b1b344094df107ab538e255a3f/diff:/var/lib/docker/overlay2/1dfe2b43c70d68f573c00b3ba8d6695fc7cce95c8d9900e34045cf59bac62cfb/diff:/var/lib/docker/overlay2/b4a34646d0deac0deaa8902827e6e29290ef9a752dfe717bb751c1546222a205/diff:/var/lib/docker/overlay2/6fe0e62cc971ce662bcf9b8b0eaded012153c9e32fddc17a19e39f3ea150386d/diff:/var/lib/docker/overlay2/e70db594c1d693b344d4d44633f3ee106df99c11d9e02c8339de47b8e5d65212/diff:/var/lib/docker/overlay2/42dd0977228f210eea44d0d1c47eada9fe51e836d167c23fe0be7c55c603e711/diff:/var/lib/docker/overlay2/fe40eb8e4ac55d31cc4a4e1109bdf8fadc65c6f2ce328ac0b179526f62fccf9e/diff:/var/lib/docker/overlay2/d4a432689bc8160b4778ebeb41e67eacd000db3c428d7f3a8da6dacc8a2be396/diff",
            "MergedDir": "/var/lib/docker/overlay2/583f5dedd516503f010548409dcf8d3669880b56ce89db01627824bb50b372b0/merged",
            "UpperDir": "/var/lib/docker/overlay2/583f5dedd516503f010548409dcf8d3669880b56ce89db01627824bb50b372b0/diff",
            "WorkDir": "/var/lib/docker/overlay2/583f5dedd516503f010548409dcf8d3669880b56ce89db01627824bb50b372b0/work"
        },
        "Name": "overlay2"
    },
    "RootFS": {
        "Type": "layers",
        "Layers": [
            "sha256:7c070db41ec632bd0d46fc5b930e8927ed4dafbb76150adf0cf1201fc0fbb837",
            "sha256:0954f971ab4db68ac48411b19a78f953ce182a79c967ae6339322a7cca550252",
            "sha256:3b928ddf1f17ef12255f77d68dea1c1fbbc9963e17e201aa0334f87da542d5e9",
            "sha256:7948c811968613161dc98c1213f565a5aa766e5c720bbe116187b8e7fbbe328a",
            "sha256:c843ca12fb6d88ed7bc0290ee7cbc44ab1066540d97c00ae4ead622162dd5a23",
            "sha256:4028c3e9856444f30a0b826ce022def5b050dafc914275b15ce316b3bebb523c",
            "sha256:deb43be122aa3d8cd79113b0509d6c368a94e4d77de69a6f07cd5fd1bde8efad",
            "sha256:d8338cb16ae91e63c04ce507a67cfd81fa9d6c26e16cdb69eecdcc451f8d8573",
            "sha256:1a34600952b014e87ecc581aaebe9dd804e2fdffabe46da92f560d76a0e9cc73",
            "sha256:c3f71dd08f77402bf7258cb540c3352a4c9142862ed58a42d975377de16291aa",
            "sha256:e77996d94f387ff14977c4766bdedef813037a8bd60a0af6ee0a9e89e0d5b048",
            "sha256:d71466b0c0e036576a593c7cabe1b553663a88fefd99616ff1dc5ed1eefd6b7e",
            "sha256:9e203dea814c7e55311aa52e0a0be75e0d74c904b5b01acbcccf051ede49dd09",
            "sha256:553f82368636605a16b11e345624bfae2a22db19738d7e0862ba48e079cfb858",
            "sha256:9ddd3f2b40e605533eb03ff33e807bd0066e3a625049d36aea2b1678186c0a54",
            "sha256:f89aa35e96fba6a090d37abb3c563db89d74abd11829c728a12b25df13128ca4",
            "sha256:926a579df3d0fb36c5a40952869e6086b8a944ab191baff282cd87af6d7ba23b",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef"
        ]
    },
    "Metadata": {
        "LastTagTime": "2026-04-29T11:36:45.231818834+08:00"
    }
}