DependencyTrack / DependencyTrack/dependency-track
Improve automated deployment with Docker
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
### Current Behavior
The password for the admin account has to be update once the application starts for the first time.
The different vulnerabilities datasources: NVD, GitHub advisories, OSS Index, Open Source Vulnerabilities, Sonatype OSS Index, Snyk need to be manually configured.
### Proposed Behavior
To have properties inside the Docker Compose file to configure as code Dependency Track.
Example:
`
ALPINE_DEFAULT_ADMIN_NAME="admin"
ALPINE_DEFAULT_ADMIN_PASSWORD="admin"
ALPINE_DATASOURCE_NVD_MIRROR="http://hostname/mirror/nvd"
ALPINE_DATASOURCE_GHSA_PAT="mypat"
ALPINE_DATASOURCE_OSV_ENABLE=true
ALPINE_DATASOURCE_OSV_BASE_URL="https://osv-vulnerabilities.storage.googleapis.com"
ALPINE_DATASOURCE_OSV_ECOSYSTEM="JavaScript;Maven"
ALPINE_DATASOURCE_SONATYPE_OSS_INDEX_ENABLE=true
ALPINE_DATASOURCE_SONATYPE_OSS_INDEX_EMAIL="me@example.com"
ALPINE_DATASOURCE_SONATYPE_OSS_INDEX_API_TOKEN="mytoken"
ALPINE_DATASOURCE_SNYK_ENABLE=true
ALPINE_DATASOURCE_SNYK_ORGANIZATION_ID="myid"
ALPINE_DATASOURCE_SNYK_API_TOKEN="mytoken1;mytoken2"
ALPINE_DATASOURCE_SNYK_API_VERSION="2022-11-14"
ALPINE_DATASOURCE_VULNDB_ENABLE=true
ALPINE_DATASOURCE_VULNDB_BASE_URL="https://vulndb.cyberriskanalytics.com"
ALPINE_DATASOURCE_VULNDB_API_KEY="mykey"
ALPINE_DATASOURCE_VULNDB_API_SECRET="mysecret"
`
### Checklist
- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this enhancement was already requested
Contributor guide
Assessment
This issue has not been assessed yet.