make opa relative

Author: jacdavi

m365/image/Dockerfile

@@ -25,10 +25,10 @@ RUN Initialize-SCuBA -Scope AllUsers -NoOPA
 COPY run_container.ps1 .
 
 # manually install OPA, grant ContainerUser execute permissions, then switch to user
-ENV OPA_PATH="C:\app\opa_windows_amd64.exe"
-RUN $ProgressPreference = 'SilentlyContinue'; Invoke-WebRequest -Uri https://openpolicyagent.org/downloads/v$($Env:OPA_VERSION)/opa_windows_amd64.exe -OutFile $Env:OPA_PATH -UseBasicParsing
-RUN if ((Get-FileHash $Env:OPA_PATH -Algorithm SHA256).Hash -ne ([System.Text.Encoding]::ASCII.GetString((Invoke-WebRequest -Uri https://openpolicyagent.org/downloads/v$($Env:OPA_VERSION)/opa_windows_amd64.exe.sha256 -UseBasicParsing).Content) -split ' ')[0]) { exit 1 }
-RUN icacls.exe $env:OPA_PATH /grant 'User Manager\ContainerUser:RX'
+ENV OPA_NAME="opa_windows_amd64.exe"
+RUN $ProgressPreference = 'SilentlyContinue'; Invoke-WebRequest -Uri https://openpolicyagent.org/downloads/v$($Env:OPA_VERSION)/opa_windows_amd64.exe -OutFile $Env:OPA_NAME -UseBasicParsing
+RUN if ((Get-FileHash $Env:OPA_NAME -Algorithm SHA256).Hash -ne ([System.Text.Encoding]::ASCII.GetString((Invoke-WebRequest -Uri https://openpolicyagent.org/downloads/v$($Env:OPA_VERSION)/opa_windows_amd64.exe.sha256 -UseBasicParsing).Content) -split ' ')[0]) { exit 1 }
+RUN icacls.exe $env:OPA_NAME /grant 'User Manager\ContainerUser:RX'
 USER ContainerUser
 
 CMD [ "powershell", ".\\run_container.ps1" ]

m365/image/run_container.ps1

@@ -40,7 +40,7 @@ Foreach ($tenantConfig in $(Get-ChildItem 'input\')) {
             AppID = $Env:APP_ID; # App ID; Needed for Service Principal Auth
             Organization = $org; # primary domain of the tenantConfig needed for Service Principal Auth
             OutPath = ".\reports\$($org)"; # The folder path where the output will be stored
-            OPAPath = "C:\apps"
+            OPAPath = "."
             ConfigFilePath = $tenantConfig.FullName
             Quiet = $true;
         }