DependencyTrack / DependencyTrack/dependency-track

Improve automated deployment with Docker

Open
#2,443 5 comments 4 reactions 0 assignees View on GitHub
enhancement p2 size/L
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior

The password for the admin account has to be update once the application starts for the first time.
The different vulnerabilities datasources: NVD, GitHub advisories, OSS Index, Open Source Vulnerabilities, Sonatype OSS Index, Snyk need to be manually configured.

### Proposed Behavior

To have properties inside the Docker Compose file to configure as code Dependency Track.

Example:
`
ALPINE_DEFAULT_ADMIN_NAME="admin"
ALPINE_DEFAULT_ADMIN_PASSWORD="admin"
ALPINE_DATASOURCE_NVD_MIRROR="http://hostname/mirror/nvd"
ALPINE_DATASOURCE_GHSA_PAT="mypat"
ALPINE_DATASOURCE_OSV_ENABLE=true
ALPINE_DATASOURCE_OSV_BASE_URL="https://osv-vulnerabilities.storage.googleapis.com"
ALPINE_DATASOURCE_OSV_ECOSYSTEM="JavaScript;Maven"
ALPINE_DATASOURCE_SONATYPE_OSS_INDEX_ENABLE=true
ALPINE_DATASOURCE_SONATYPE_OSS_INDEX_EMAIL="me@example.com"
ALPINE_DATASOURCE_SONATYPE_OSS_INDEX_API_TOKEN="mytoken"
ALPINE_DATASOURCE_SNYK_ENABLE=true
ALPINE_DATASOURCE_SNYK_ORGANIZATION_ID="myid"
ALPINE_DATASOURCE_SNYK_API_TOKEN="mytoken1;mytoken2"
ALPINE_DATASOURCE_SNYK_API_VERSION="2022-11-14"
ALPINE_DATASOURCE_VULNDB_ENABLE=true
ALPINE_DATASOURCE_VULNDB_BASE_URL="https://vulndb.cyberriskanalytics.com"
ALPINE_DATASOURCE_VULNDB_API_KEY="mykey"
ALPINE_DATASOURCE_VULNDB_API_SECRET="mysecret"
`

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this enhancement was already requested

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.