diff --git a/.env b/.env index 07a4e6ddc5..8f22eed5c8 100644 --- a/.env +++ b/.env @@ -2,3 +2,6 @@ CAMUNDADB_DATABASE=camundadb CAMUNDADB_ROOT_PW=root CAMUNDADB_USER=camunda CAMUNDADB_PW=secret + +ENGINE_SCANNERSERVICES_USER=default-scanner +ENGINE_SCANNERSERVICES_PASSWORD=scan diff --git a/README.md b/README.md index abe1ab10f9..c6ce95c1e2 100644 --- a/README.md +++ b/README.md @@ -65,6 +65,8 @@ Running `docker-compose up` uses the default credentials specified in the [`.env * `CAMUNDADB_ROOT_PW` MySQL root password * `CAMUNDADB_USER` MySQL username used by the Camunda Engine * `CAMUNDADB_PW` MySQL password also used by the Camunda Engine + * `ENGINE_SCANNERSERVICES_USER` Technical user for the scanner services to access the engines API + * `ENGINE_SCANNERSERVICES_PASSWORD` Technical users password for the scanner services to access the engines API > **Hint**: You will need at least 4GB virtual memory to run the complete stack. If you want to scale out the scanner you will need more... diff --git a/docker-compose.yml b/docker-compose.yml index de8f100965..c9e8e3b0a1 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -26,6 +26,8 @@ services: - SECURECODEBOX_DEFAULT_TARGET_LOCATION=juice-shop - SECURECODEBOX_DEFAULT_TARGET_URI=http://juice-shop:3000 - SECURECODEBOX_DEFAULT_CONTEXT=JuiceShop Test Scan + - SECURECODEBOX_USER_SCANNER=${ENGINE_SCANNERSERVICES_USER} + - SECURECODEBOX_USER_SCANNER_PW=${ENGINE_SCANNERSERVICES_PASSWORD} restart: on-failure:3 camundadb: @@ -53,6 +55,8 @@ services: container_group: scanner environment: - ENGINE_ADDRESS=http://engine:8080 + - ENGINE_BASIC_AUTH_USER=${ENGINE_SCANNERSERVICES_USER} + - ENGINE_BASIC_AUTH_PASSWORD=${ENGINE_SCANNERSERVICES_PASSWORD} scanner-webserver-nikto: image: securecodebox/nikto:v0.9.0 @@ -64,6 +68,8 @@ services: container_group: scanner environment: - ENGINE_ADDRESS=http://engine:8080 + - ENGINE_BASIC_AUTH_USER=${ENGINE_SCANNERSERVICES_USER} + - ENGINE_BASIC_AUTH_PASSWORD=${ENGINE_SCANNERSERVICES_PASSWORD} scanner-webapplication-zap: image: securecodebox/zap:v0.9.0 @@ -75,6 +81,8 @@ services: container_group: scanner environment: - ENGINE_ADDRESS=http://engine:8080 + - ENGINE_BASIC_AUTH_USER=${ENGINE_SCANNERSERVICES_USER} + - ENGINE_BASIC_AUTH_PASSWORD=${ENGINE_SCANNERSERVICES_PASSWORD} scanner-webapplication-sslyze: image: securecodebox/sslyze:v0.9.0 @@ -86,6 +94,8 @@ services: container_group: scanner environment: - ENGINE_ADDRESS=http://engine:8080 + - ENGINE_BASIC_AUTH_USER=${ENGINE_SCANNERSERVICES_USER} + - ENGINE_BASIC_AUTH_PASSWORD=${ENGINE_SCANNERSERVICES_PASSWORD} scanner-webapplication-arachni: image: securecodebox/arachni:v0.9.0 @@ -97,6 +107,8 @@ services: container_group: scanner environment: - ENGINE_ADDRESS=http://engine:8080 + - ENGINE_BASIC_AUTH_USER=${ENGINE_SCANNERSERVICES_USER} + - ENGINE_BASIC_AUTH_PASSWORD=${ENGINE_SCANNERSERVICES_PASSWORD} volumes: - "./plugins/arachni-login-scripts:/securecodebox/scripts/" @@ -110,6 +122,8 @@ services: container_group: scanner environment: - ENGINE_ADDRESS=http://engine:8080 + - ENGINE_BASIC_AUTH_USER=${ENGINE_SCANNERSERVICES_USER} + - ENGINE_BASIC_AUTH_PASSWORD=${ENGINE_SCANNERSERVICES_PASSWORD} - DEBUG=true persistence-elasticsearch: