langgenius / langgenius/dify-sandbox

Support to install the python and nodejs dependencies via CI system

Open
#180 0 comments 1 reaction 0 assignees View on GitHub
Dominant language
Go
Stars
1.3k
Forks
325
Avg merge
56m
Merged PRs (30d)
3

Description

Currently, dify-sandbox would trigger auto-install dependencies by executing commands to install the /dependencies/python-requirements.txt . However, it has potential security risk since dify-sandbox would need internet access and also privileged access to the runtime container.

I want to change the Dockerfile to install the required dependencies via CI system when building the dify-sandbox runtime image, is it possible to cover both Python and Nodejs dependency installation in the Dockerfile ?

Thanks.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reading the Dockerfile and /dependencies/python-requirements.txt, then inspect the CI build for the dify-sandbox runtime image. Confirm how Node.js dependencies are represented before defining the build steps; done means both Python and Node.js dependencies are installed during image build without runtime internet access or privileged auto-install.

Written by the indexing model from the issue text.

Assessment

Tech stack
dockerfile, node.js, python
Domain
build-system, devops, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.