Docker Deployment

# Clone the repo
git clone https://github.com/breakingthecloud/sofe.git
cd sofe

# Start with docker compose (mounts your AWS credentials)
docker compose up

# Test
curl http://localhost:8080/health
# → {"status":"ok","version":"0.2.0","edition":"community"}

# Option A: Mount AWS credentials (recommended)
docker run -p 8080:8080 \
  -v ~/.aws:/root/.aws:ro \
  ghcr.io/breakingthecloud/sofe-community

# Option B: Pass credentials as env vars
docker run -p 8080:8080 \
  -e AWS_ACCESS_KEY_ID=AKIA... \
  -e AWS_SECRET_ACCESS_KEY=xxx \
  -e AWS_DEFAULT_REGION=us-east-1 \
  ghcr.io/breakingthecloud/sofe-community

# Option C: Use a specific AWS profile
docker run -p 8080:8080 \
  -v ~/.aws:/root/.aws:ro \
  -e AWS_PROFILE=my-profile \
  ghcr.io/breakingthecloud/sofe-community

git clone https://github.com/breakingthecloud/sofe.git
cd sofe
docker build -t sofe-community .
docker run -p 8080:8080 -v ~/.aws:/root/.aws:ro sofe-community

docker run -p 8080:8080 \
  -v ~/.aws:/root/.aws:ro \
  -v ./my-policies:/app/policies:ro \
  ghcr.io/breakingthecloud/sofe-community

curl -X POST http://localhost:8080/evaluate \
  -H "Content-Type: application/json" \
  -d '{"profile": "default"}'

# Response:
# {
#   "resources_scanned": 64,
#   "policies_evaluated": 20,
#   "findings_count": 48,
#   "findings": [...]
# }

# docker-compose.yml
services:
  sofe:
    build: .
    ports:
      - "8080:8080"
    volumes:
      - ~/.aws:/root/.aws:ro
      # - ./my-policies:/app/policies:ro
    environment:
      - AWS_DEFAULT_REGION=us-east-1
    healthcheck:
      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:8080/health')"]
      interval: 30s
      timeout: 3s
    restart: unless-stopped