gitleaks integration into server deployment mercedes-benz#2944

Tragio · Feb 27, 2024 · 5c31beb · 5c31beb
1 parent 410d87d
commit 5c31beb
Show file tree

Hide file tree

Showing 3 changed files with 24 additions and 1 deletion.
diff --git a/sechub-solution/helm/sechub-server/Chart.yaml b/sechub-solution/helm/sechub-server/Chart.yaml
@@ -15,4 +15,4 @@ maintainers:
 # This version number should be incremented each time you make changes to the chart and its templates.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
 
-version: 1.5.0
+version: 1.6.0
diff --git a/sechub-solution/helm/sechub-server/templates/deployment.yaml b/sechub-solution/helm/sechub-server/templates/deployment.yaml
@@ -433,6 +433,21 @@ spec:
                name: secret-pds-findsecuritybugs
                key: techuser_password
 {{- end }}
+{{- if .Values.pdsGitleaks.enabled }}
+# ----------------------------------------------------------------------------------------------#
+# - Scope: PDS-Gitleaks
+# --------------------------------------------------------------------------------------------- #
+        - name: SECHUB_PDS_GITLEAKS_USERID
+          valueFrom:
+            secretKeyRef:
+               name: secret-pds-gitleaks
+               key: techuser_username
+        - name: SECHUB_PDS_GITLEAKS_PASSWORD
+          valueFrom:
+            secretKeyRef:
+               name: secret-pds-gitleaks
+               key: techuser_password
+{{- end }}
 {{- if .Values.pdsGoSec.enabled }}
 # ----------------------------------------------------------------------------------------------#
 # - Scope: PDS-GoSec

diff --git a/sechub-solution/helm/sechub-server/values.yaml b/sechub-solution/helm/sechub-server/values.yaml
@@ -287,6 +287,14 @@ pdsFindSecurityBugs:
   # Put the user id  of PDS-FindSecurityBugs in k8s secret secret-pds-findsecuritybugs:techuser_username
   # Put the password of PDS-FindSecurityBugs in k8s secret secret-pds-findsecuritybugs:techuser_password
 
+# ------------------------------------------------------------------------------------- #
+# PDS-GoSec adapter
+# ------------------------------------------------------------------------------------- #
+pdsGitleaks:
+  enabled: false
+  # Put the user id  of PDS-Gitleaks in k8s secret secret-pds-gitleaks:techuser_username
+  # Put the password of PDS-Gitleaks in k8s secret secret-pds-gitleaks:techuser_password
+
 # ------------------------------------------------------------------------------------- #
 # PDS-GoSec adapter
 # ------------------------------------------------------------------------------------- #