Benign Download

Dockerfile

Curl quiet downloadGitHub releases download URL

SHA-2564073d4e5ee8beda0a6b8861ffd19e39bc8c66e2c74f77e5a5008f3e4e3e4a8b8

Evidence

curl command lines 24–25

24RUN curl -LsSf https://astral.sh/uv/install.sh | sh
25ENV PATH="/root/.local/bin:$PATH"

rm -rf shell command lines 31–38

⋯5 lines
  git \
  ca-certificates \
  && rm -rf /var/lib/apt/lists/*

curl or wget fetches an HTTP URL lines 53–58

53# Download and install Ghidra 12 (includes PyGhidra)
54WORKDIR /opt
55RUN wget -q https://github.com/NationalSecurityAgency/ghidra/releases/download/Ghidra_12.0_build/ghidra_12.0_PUBLIC_20251205.zip \
56    && unzip -q ghidra_12.0_PUBLIC_20251205.zip \
57    && mv ghidra_12.0_PUBLIC ghidra \
58    && rm ghidra_12.0_PUBLIC_20251205.zip