Thor-Lite-Util Update/Upgrade Support

[Aevyz]

Hey,
thanks for providing an OpenRelik plugin for Thor. One thing I noticed when testing it, was that I can't seem to find the point in the source code, where Thor is updated / upgraded. Considering the build is from 11 months ago, doesn't that mean that the signatures are almost a year old?

Would it not make sense to have the tool execute an update before running the scan?

https://github.com/NextronSystems/openrelik-worker-thor-lite/blob/main/src/tasks.py#L78

/thor-lite/thor-lite-linux-64 -> /thor-lite/thor-lite-util upgrade && /thor-lite/thor-lite-linux-64...

[berggren]

Thor is updated when the docker image is created. To get an updated version you can build your own docker image and use that.

https://github.com/NextronSystems/openrelik-worker-thor-lite/blob/main/Dockerfile

[Aevyz]

I see, so the workflow would be that we would need to regularly (i.e., daily) rebuild the container in order to update Thor and get the latest signatures?