mirror of
https://github.com/ysoftdevs/odc-analyzer.git
synced 2026-01-11 14:30:50 +01:00
146 lines
4.0 KiB
Plaintext
146 lines
4.0 KiB
Plaintext
# This is the main configuration file for the application.
|
|
# ~~~~~
|
|
|
|
# Secret key
|
|
# ~~~~~
|
|
# The secret key is used to secure cryptographics functions.
|
|
#
|
|
# This must be changed for production, but we recommend not changing it in this file.
|
|
#
|
|
# See https://www.playframework.com/documentation/latest/ApplicationSecret for more details.
|
|
play.crypto.secret = "{{ lookup('password', 'play_secret length=64') }}"
|
|
|
|
# The application languages
|
|
# ~~~~~
|
|
play.i18n.langs = [ "en" ]
|
|
|
|
app{
|
|
host=… # You have to configure the host there. If you don't do so, all accesses via host will be prohibited. This is a protection against DNS rebind attacks.
|
|
secure = true # Use true iff you use HTTPS
|
|
}
|
|
|
|
yssdc{
|
|
# Anyone who knows the cron key can start periodic tasks
|
|
cronKey="{{ lookup('password', 'cron_token length=64') }}"
|
|
bamboo{
|
|
url = …
|
|
}
|
|
reports {
|
|
provider = "bamboo"
|
|
bamboo{
|
|
user = …
|
|
password = …
|
|
}
|
|
}
|
|
export{
|
|
# Optional section: export to issue tracker
|
|
issueTracker{
|
|
provider: "jira"
|
|
server: "http://…"
|
|
projectId = 10000
|
|
vulnerabilityIssueType = 10100
|
|
authentication {
|
|
type = "credentials"
|
|
user = "…"
|
|
password = "…"
|
|
}
|
|
}
|
|
# Optional section: email notifications
|
|
email{
|
|
from = "info@example.com"
|
|
noSubscriberContact = "foobar@example.com"
|
|
//optional: type = "digest" or type="vulnerabilities" (default); Digest is WIP.
|
|
}
|
|
}
|
|
projects = {jobId:humanReadableName, …}
|
|
teams = […]
|
|
exclusions{
|
|
missingGAV{
|
|
bySha1 = []
|
|
}
|
|
}
|
|
projectsToTeams = {
|
|
…
|
|
}
|
|
teamLeaders = { # all teams used here must be listed above
|
|
team: leader,
|
|
…
|
|
}
|
|
}
|
|
|
|
# Router
|
|
# ~~~~~
|
|
# Define the Router object to use for this application.
|
|
# This router will be looked up first when the application is starting up,
|
|
# so make sure this is the entry point.
|
|
# Furthermore, it's assumed your route file is named properly.
|
|
# So for an application router like `my.application.Router`,
|
|
# you may need to define a router file `conf/my.application.routes`.
|
|
# Default to Routes in the root package (and conf/routes)
|
|
# play.http.router = my.application.Routes
|
|
|
|
# Database configuration
|
|
# ~~~~~
|
|
# You can declare as many datasources as you want.
|
|
# By convention, the default datasource is named `default`
|
|
#
|
|
|
|
slick.dbs.default {
|
|
# Connection to internal database. It must be PostgreSQL.
|
|
driver = "slick.driver.PostgresDriver$"
|
|
db{
|
|
url = "jdbc:postgresql://localhost/odca"
|
|
user = …
|
|
password = …
|
|
}
|
|
}
|
|
slick.dbs.odc {
|
|
# Connection to ODC database. It should be MySQL/MariaDB. H2 DB is not supported. PostgreSQL might work if you get ODC working with it, Other databases might be supported in future.
|
|
driver = "slick.driver.MySQLDriver$"
|
|
db {
|
|
url = "jdbc:mysql://127.0.0.1/dependencycheck"
|
|
# These credentials are default in ODC (but you might have changed them):
|
|
user = "dcuser"
|
|
password = "DC-Pass1337!"
|
|
}
|
|
}
|
|
|
|
# Evolutions
|
|
# ~~~~~
|
|
# You can disable evolutions if needed
|
|
# play.evolutions.enabled=false
|
|
|
|
# You can disable evolutions for a specific datasource if necessary
|
|
# play.evolutions.db.default.enabled=false
|
|
|
|
|
|
|
|
silhouette {
|
|
# Authenticator settings
|
|
authenticator.cookieName = "authenticator"
|
|
authenticator.cookiePath = "/"
|
|
authenticator.secureCookie=false # is ignored; overriden in app/controllers/AuthController.scala; But it must be present!
|
|
authenticator.httpOnlyCookie = true
|
|
authenticator.useFingerprinting = true
|
|
authenticator.authenticatorIdleTimeout = 12 hours
|
|
authenticator.authenticatorExpiry = 12 hours
|
|
|
|
authenticator.rememberMe.cookieMaxAge = 30 days
|
|
authenticator.rememberMe.authenticatorIdleTimeout = 5 days
|
|
authenticator.rememberMe.authenticatorExpiry = 30 days
|
|
|
|
credentialsVerificationService{
|
|
type="external" # verifies credentials at the URL specified below
|
|
url="http://localhost:9050/"
|
|
}
|
|
}
|
|
|
|
play{
|
|
# needed if you want this app to send emails
|
|
mailer{
|
|
//mock = true # If mock is true, mails are not actually sent, but just logged.
|
|
host = "…"
|
|
}
|
|
}
|
|
|