Merge pull request #52 from secureCodeBox/feature/add-basic-auth-to-engine-api

J12934 · web-flow · commit c041d2ec00c7 · 2018-12-11T11:07:21.000+01:00
Added environment variables to define scanner user
diff --git a/.env b/.env
@@ -2,3 +2,6 @@ CAMUNDADB_DATABASE=camundadb
 CAMUNDADB_ROOT_PW=root
 CAMUNDADB_USER=camunda
 CAMUNDADB_PW=secret
+
+ENGINE_SCANNERSERVICES_USER=default-scanner
+ENGINE_SCANNERSERVICES_PASSWORD=scan
diff --git a/README.md b/README.md
@@ -66,6 +66,8 @@ Running `docker-compose up` uses the default credentials specified in the [`.env
  * `CAMUNDADB_ROOT_PW` MySQL root password
  * `CAMUNDADB_USER` MySQL username used by the Camunda Engine
  * `CAMUNDADB_PW` MySQL password also used by the Camunda Engine
+ * `ENGINE_SCANNERSERVICES_USER` Technical user for the scanner services to access the engines API
+ * `ENGINE_SCANNERSERVICES_PASSWORD` Technical users password for the scanner services to access the engines API
 
 ### Run your first security scan
 There are several ways to start a security scan with the secureCodeBox. One way is to use the WebUI of the engine and start the scan manually.
diff --git a/docker-compose.yml b/docker-compose.yml
@@ -26,6 +26,8 @@ services:
       - SECURECODEBOX_DEFAULT_TARGET_LOCATION=juice-shop
       - SECURECODEBOX_DEFAULT_TARGET_URI=http://juice-shop:3000
       - SECURECODEBOX_DEFAULT_CONTEXT=JuiceShop Test Scan
+      - SECURECODEBOX_USER_SCANNER=${ENGINE_SCANNERSERVICES_USER}
+      - SECURECODEBOX_USER_SCANNER_PW=${ENGINE_SCANNERSERVICES_PASSWORD}
     restart: on-failure:3
 
   camundadb:
@@ -53,6 +55,8 @@ services:
       container_group: scanner
     environment:
       - ENGINE_ADDRESS=http://engine:8080
+      - ENGINE_BASIC_AUTH_USER=${ENGINE_SCANNERSERVICES_USER}
+      - ENGINE_BASIC_AUTH_PASSWORD=${ENGINE_SCANNERSERVICES_PASSWORD}
 
   scanner-webserver-nikto:
     image: securecodebox/nikto:v0.9.0
@@ -64,6 +68,8 @@ services:
       container_group: scanner
     environment:
       - ENGINE_ADDRESS=http://engine:8080
+      - ENGINE_BASIC_AUTH_USER=${ENGINE_SCANNERSERVICES_USER}
+      - ENGINE_BASIC_AUTH_PASSWORD=${ENGINE_SCANNERSERVICES_PASSWORD}
 
   scanner-webapplication-zap:
       image: securecodebox/zap:v0.9.0
@@ -75,6 +81,8 @@ services:
         container_group: scanner
       environment:
       - ENGINE_ADDRESS=http://engine:8080
+      - ENGINE_BASIC_AUTH_USER=${ENGINE_SCANNERSERVICES_USER}
+      - ENGINE_BASIC_AUTH_PASSWORD=${ENGINE_SCANNERSERVICES_PASSWORD}
 
   scanner-webapplication-sslyze:
       image: securecodebox/sslyze:v0.9.0
@@ -86,6 +94,8 @@ services:
         container_group: scanner
       environment:
       - ENGINE_ADDRESS=http://engine:8080
+      - ENGINE_BASIC_AUTH_USER=${ENGINE_SCANNERSERVICES_USER}
+      - ENGINE_BASIC_AUTH_PASSWORD=${ENGINE_SCANNERSERVICES_PASSWORD}
 
   scanner-webapplication-arachni:
       image: securecodebox/arachni:v0.9.0
@@ -97,6 +107,8 @@ services:
         container_group: scanner
       environment:
       - ENGINE_ADDRESS=http://engine:8080
+      - ENGINE_BASIC_AUTH_USER=${ENGINE_SCANNERSERVICES_USER}
+      - ENGINE_BASIC_AUTH_PASSWORD=${ENGINE_SCANNERSERVICES_PASSWORD}
       volumes:
       - "./plugins/arachni-login-scripts:/securecodebox/scripts/"
 
@@ -110,6 +122,8 @@ services:
         container_group: scanner
       environment:
       - ENGINE_ADDRESS=http://engine:8080
+      - ENGINE_BASIC_AUTH_USER=${ENGINE_SCANNERSERVICES_USER}
+      - ENGINE_BASIC_AUTH_PASSWORD=${ENGINE_SCANNERSERVICES_PASSWORD}
       - DEBUG=true
 
   persistence-elasticsearch:
