8000 Added environment variables to define scanner user by MartinLang1 · Pull Request #52 · secureCodeBox/secureCodeBox · GitHub
[go: up one dir, main page]
Skip to content

Added environment variables to define scanner user #52

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
J12934 merged 1 commit into from
Dec 11, 2018
Merged

Added environment variables to define scanner user #52

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions .env
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,3 +2,6 @@ CAMUNDADB_DATABASE=camundadb
CAMUNDADB_ROOT_PW=root
CAMUNDADB_USER=camunda
CAMUNDADB_PW=secret

ENGINE_SCANNERSERVICES_USER=default-scanner
ENGINE_SCANNERSERVICES_PASSWORD=scan
2 changes: 2 additions & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -65,6 +65,8 @@ Running `docker-compose up` uses the default credentials specified in the [`.env
* `CAMUNDADB_ROOT_PW` MySQL root password
* `CAMUNDADB_USER` MySQL username used by the Camunda Engine
* `CAMUNDADB_PW` MySQL password also used by the Camunda Engine
* `ENGINE_SCANNERSERVICES_USER` Technical user for the scanner services to access the engines API
* `ENGINE_SCANNERSERVICES_PASSWORD` Technical users password for the scanner services to access the engines API


> **Hint**: You will need at least 4GB virtual memory to run the complete stack. If you want to scale out the scanner you will need more...
Expand Down
14 changes: 14 additions & 0 deletions docker-compose.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,8 @@ services:
- SECURECODEBOX_DEFAULT_TARGET_LOCATION=juice-shop
- SECURECODEBOX_DEFAULT_TARGET_URI=http://juice-shop:3000
- SECURECODEBOX_DEFAULT_CONTEXT=JuiceShop Test Scan
- SECURECODEBOX_USER_SCANNER=${ENGINE_SCANNERSERVICES_USER}
- SECURECODEBOX_USER_SCANNER_PW=${ENGINE_SCANNERSERVICES_PASSWORD}
restart: on-failure:3

camundadb:
Expand Down Expand Up @@ -53,6 +55,8 @@ services:
container_group: scanner
environment:
- ENGINE_ADDRESS=http://engine:8080
- ENGINE_BASIC_AUTH_USER=${ENGINE_SCANNERSERVICES_USER}
- ENGINE_BASIC_AUTH_PASSWORD=${ENGINE_SCANNERSERVICES_PASSWORD}

scanner-webserver-nikto:
image: securecodebox/nikto:v0.9.0
Expand All @@ -64,6 +68,8 @@ services:
container_group: scanner
environment:
- ENGINE_ADDRESS=http://engine:8080
- ENGINE_BASIC_AUTH_USER=${ENGINE_SCANNERSERVICES_USER}
- ENGINE_BASIC_AUTH_PASSWORD=${ENGINE_SCANNERSERVICES_PASSWORD}

scanner-webapplication-zap:
image: securecodebox/zap:v0.9.0
Expand All @@ -75,6 +81,8 @@ services:
container_group: scanner
environment:
- ENGINE_ADDRESS=http://engine:8080
- ENGINE_BASIC_AUTH_USER=${ENGINE_SCANNERSERVICES_USER}
- ENGINE_BASIC_AUTH_PASSWORD=${ENGINE_SCANNERSERVICES_PASSWORD}

scanner-webapplication-sslyze:
image: securecodebox/sslyze:v0.9.0
Expand All @@ -86,6 +94,8 @@ services:
container_group: scanner
environment:
- ENGINE_ADDRESS=http://engine:8080
- ENGINE_BASIC_AUTH_USER=${ENGINE_SCANNERSERVICES_USER}
- ENGINE_BASIC_AUTH_PASSWORD=${ENGINE_SCANNERSERVICES_PASSWORD}

scanner-webapplication-arachni:
image: securecodebox/arachni:v0.9.0
Expand All @@ -97,6 +107,8 @@ services:
container_group: scanner
environment:
- ENGINE_ADDRESS=http://engine:8080
- ENGINE_BASIC_AUTH_USER=${ENGINE_SCANNERSERVICES_USER}
- ENGINE_BASIC_AUTH_PASSWORD=${ENGINE_SCANNERSERVICES_PASSWORD}
volumes:
- "./plugins/arachni-login-scripts:/securecodebox/scripts/"

Expand All @@ -110,6 +122,8 @@ services:
container_group: scanner
environment:
- ENGINE_ADDRESS=http://engine:8080
- ENGINE_BASIC_AUTH_USER=${ENGINE_SCANNERSERVICES_USER}
- ENGINE_BASIC_AUTH_PASSWORD=${ENGINE_SCANNERSERVICES_PASSWORD}
- DEBUG=true

persistence-elasticsearch:
Expand Down
0