Release/0.1.0 beta/prod azure

Jenkinsfile

@@ -199,8 +199,7 @@ pipeline {
                 jslStageWrapper('Build Docker Service') {
                     script {
                         jslBuildDocker([
-                            'serviceName': env.appName,
-                            'dockerReg': 'secunicontainerregistry.azurecr.io'
+                            'serviceName': env.appName
                         ])
                     }
                 }
@@ -231,7 +230,7 @@ pipeline {
                         def stageConfig = jslReadYamlConfig('containerScan')
                         def containerName = stageConfig?.containerName
                         def containerTag = stageConfig?.containerTag
-                        jslContainerSecurityScanning(containerName, containerTag, 'secunicontainerregistry.azurecr.io')
+                        jslContainerSecurityScanning(containerName, containerTag)
                     }
                 }
             }
@@ -348,9 +347,7 @@ pipeline {
                             'secretsCredentials': stageConfig?.secretsCredentials,
                             'secretsSetStrings': stageConfig?.secretsSetStrings,
                             'serviceCredentials': stageConfig?.serviceCredentials,
-                            'serviceSetStrings': stageConfig?.serviceSetStrings,
-                            'dockerReg': 'secunicontainerregistry.azurecr.io',
-                            'imgPullSecret': 'acrCreds'
+                            'serviceSetStrings': stageConfig?.serviceSetStrings
                         ])
 
                     }

pipeline-config.yaml

@@ -9,21 +9,21 @@ stages:
     branches:
       - release
   unitTesting:
-    enabled: true
+    enabled: false
     branches: []
   secretScanning:
     enabled: false
     branches:
       - release
   sca:
-    enabled: true
+    enabled: false
     branches:
       - release
     codeLanguages:
       - Python
       - Javascript
   sast:
-    enabled: true
+    enabled: false
     branches:
       - release
     codeLanguages:
@@ -37,26 +37,26 @@ stages:
     branches:
       - release
   containerScan:
-    enabled: true
+    enabled: false
     branches:
       - release
     containerName: secusphere
     containerTag: latest
   releaseToTest:
-    enabled: true
+    enabled: false
     branches:
       - release
     serviceName: secusphere
     containerTag: latest
   testRelease:
-    enabled: true
+    enabled: false
     branches:
       - release
     targetUrl: 'http://192.168.0.68:5010'
     dastTestType: full
     apiTargetUrl: 'http://192.168.0.68:5010/api/openapi.yaml'
   securityQualityGate:
-    enabled: true
+    enabled: false
     branches:
       - release
   deploy:

src/vr/api/vulns/security_quality_gate.py

@@ -51,38 +51,38 @@ def _add_sg_config_settings(config, job_id, app_id):
     job = SgConfigSettingsPerJob(
         AppID=app_id,
         PipelineJobID = job_id,
-        ThreshScaLow = config['thresholds']['sca']['low'],
-        ThreshScaMedium = config['thresholds']['sca']['medium'],
-        ThreshScaHigh = config['thresholds']['sca']['high'],
-        ThreshScaCritical = config['thresholds']['sca']['critical'],
-        ThreshContainerLow = config['thresholds']['container']['low'],
-        ThreshContainerMedium = config['thresholds']['container']['medium'],
-        ThreshContainerHigh = config['thresholds']['container']['high'],
-        ThreshContainerCritical = config['thresholds']['container']['critical'],
-        ThreshDastLow = config['thresholds']['dast']['low'],
-        ThreshDastMedium = config['thresholds']['dast']['medium'],
-        ThreshDastHigh = config['thresholds']['dast']['high'],
-        ThreshDastCritical = config['thresholds']['dast']['critical'],
-        ThreshDastApiLow = config['thresholds']['dastapi']['low'],
-        ThreshDastApiMedium = config['thresholds']['dastapi']['medium'],
-        ThreshDastApiHigh = config['thresholds']['dastapi']['high'],
-        ThreshDastApiCritical = config['thresholds']['dastapi']['critical'],
-        ThreshInfrastructureLow = config['thresholds']['infrastructure']['low'],
-        ThreshInfrastructureMedium = config['thresholds']['infrastructure']['medium'],
-        ThreshInfrastructureHigh = config['thresholds']['infrastructure']['high'],
-        ThreshInfrastructureCritical = config['thresholds']['infrastructure']['critical'],
-        ThreshSastLow = config['thresholds']['sast']['low'],
-        ThreshSastMedium = config['thresholds']['sast']['medium'],
-        ThreshSastHigh = config['thresholds']['sast']['high'],
-        ThreshSastCritical = config['thresholds']['sast']['critical'],
-        ThreshIacLow = config['thresholds']['iac']['low'],
-        ThreshIacMedium = config['thresholds']['iac']['medium'],
-        ThreshIacHigh = config['thresholds']['iac']['high'],
-        ThreshIacCritical = config['thresholds']['iac']['critical'],
-        ThreshSecretsLow = config['thresholds']['secret']['low'],
-        ThreshSecretsMedium = config['thresholds']['secret']['medium'],
-        ThreshSecretsHigh = config['thresholds']['secret']['high'],
-        ThreshSecretsCritical = config['thresholds']['secret']['critical'],
+        ThreshScaLow = config['sca']['low'],
+        ThreshScaMedium = config['sca']['medium'],
+        ThreshScaHigh = config['sca']['high'],
+        ThreshScaCritical = config['sca']['critical'],
+        ThreshContainerLow = config['container']['low'],
+        ThreshContainerMedium = config['container']['medium'],
+        ThreshContainerHigh = config['container']['high'],
+        ThreshContainerCritical = config['container']['critical'],
+        ThreshDastLow = config['dast']['low'],
+        ThreshDastMedium = config['dast']['medium'],
+        ThreshDastHigh = config['dast']['high'],
+        ThreshDastCritical = config['dast']['critical'],
+        ThreshDastApiLow = config['dastapi']['low'],
+        ThreshDastApiMedium = config['dastapi']['medium'],
+        ThreshDastApiHigh = config['dastapi']['high'],
+        ThreshDastApiCritical = config['dastapi']['critical'],
+        ThreshInfrastructureLow = config['infrastructure']['low'],
+        ThreshInfrastructureMedium = config['infrastructure']['medium'],
+        ThreshInfrastructureHigh = config['infrastructure']['high'],
+        ThreshInfrastructureCritical = config['infrastructure']['critical'],
+        ThreshSastLow = config['sast']['low'],
+        ThreshSastMedium = config['sast']['medium'],
+        ThreshSastHigh = config['sast']['high'],
+        ThreshSastCritical = config['sast']['critical'],
+        ThreshIacLow = config['iac']['low'],
+        ThreshIacMedium = config['iac']['medium'],
+        ThreshIacHigh = config['iac']['high'],
+        ThreshIacCritical = config['iac']['critical'],
+        ThreshSecretsLow = config['secret']['low'],
+        ThreshSecretsMedium = config['secret']['medium'],
+        ThreshSecretsHigh = config['secret']['high'],
+        ThreshSecretsCritical = config['secret']['critical'],
     )
     db.session.add(job)
     db_connection_handler(db)
@@ -92,38 +92,38 @@ def _add_sg_results(results, job_id, app_id):
     job = SgResultsPerJob(
         AppID=app_id,
         PipelineJobID=job_id,
-        ResultScaLow=results['report']['sca']['low'],
-        ResultScaMedium=results['report']['sca']['medium'],
-        ResultScaHigh=results['report']['sca']['high'],
-        ResultScaCritical=results['report']['sca']['critical'],
-        ResultContainerLow=results['report']['container']['low'],
-        ResultContainerMedium=results['report']['container']['medium'],
-        ResultContainerHigh=results['report']['container']['high'],
-        ResultContainerCritical=results['report']['container']['critical'],
-        ResultDastLow=results['report']['dast']['low'],
-        ResultDastMedium=results['report']['dast']['medium'],
-        ResultDastHigh=results['report']['dast']['high'],
-        ResultDastCritical=results['report']['dast']['critical'],
-        ResultDastApiLow=results['report']['dastapi']['low'],
-        ResultDastApiMedium=results['report']['dastapi']['medium'],
-        ResultDastApiHigh=results['report']['dastapi']['high'],
-        ResultDastApiCritical=results['report']['dastapi']['critical'],
-        ResultInfrastructureLow=results['report']['infrastructure']['low'],
-        ResultInfrastructureMedium=results['report']['infrastructure']['medium'],
-        ResultInfrastructureHigh=results['report']['infrastructure']['high'],
-        ResultInfrastructureCritical=results['report']['infrastructure']['critical'],
-        ResultSastLow=results['report']['sast']['low'],
-        ResultSastMedium=results['report']['sast']['medium'],
-        ResultSastHigh=results['report']['sast']['high'],
-        ResultSastCritical=results['report']['sast']['critical'],
-        ResultIacLow=results['report']['iac']['low'],
-        ResultIacMedium=results['report']['iac']['medium'],
-        ResultIacHigh=results['report']['iac']['high'],
-        ResultIacCritical=results['report']['iac']['critical'],
-        ResultSecretsLow=results['report']['secret']['low'],
-        ResultSecretsMedium=results['report']['secret']['medium'],
-        ResultSecretsHigh=results['report']['secret']['high'],
-        ResultSecretsCritical=results['report']['secret']['critical'],
+        ResultScaLow=results['sca']['low'],
+        ResultScaMedium=results['sca']['medium'],
+        ResultScaHigh=results['sca']['high'],
+        ResultScaCritical=results['sca']['critical'],
+        ResultContainerLow=results['container']['low'],
+        ResultContainerMedium=results['container']['medium'],
+        ResultContainerHigh=results['container']['high'],
+        ResultContainerCritical=results['container']['critical'],
+        ResultDastLow=results['dast']['low'],
+        ResultDastMedium=results['dast']['medium'],
+        ResultDastHigh=results['dast']['high'],
+        ResultDastCritical=results['dast']['critical'],
+        ResultDastApiLow=results['dastapi']['low'],
+        ResultDastApiMedium=results['dastapi']['medium'],
+        ResultDastApiHigh=results['dastapi']['high'],
+        ResultDastApiCritical=results['dastapi']['critical'],
+        ResultInfrastructureLow=results['infrastructure']['low'],
+        ResultInfrastructureMedium=results['infrastructure']['medium'],
+        ResultInfrastructureHigh=results['infrastructure']['high'],
+        ResultInfrastructureCritical=results['infrastructure']['critical'],
+        ResultSastLow=results['sast']['low'],
+        ResultSastMedium=results['sast']['medium'],
+        ResultSastHigh=results['sast']['high'],
+        ResultSastCritical=results['sast']['critical'],
+        ResultIacLow=results['iac']['low'],
+        ResultIacMedium=results['iac']['medium'],
+        ResultIacHigh=results['iac']['high'],
+        ResultIacCritical=results['iac']['critical'],
+        ResultSecretsLow=results['secret']['low'],
+        ResultSecretsMedium=results['secret']['medium'],
+        ResultSecretsHigh=results['secret']['high'],
+        ResultSecretsCritical=results['secret']['critical'],
     )
     db.session.add(job)
     db_connection_handler(db)