b973887754
Some checks failed
CI / Format (push) Failing after 3s
CI / Clippy (push) Failing after 2m35s
CI / Security Audit (push) Has been skipped
CI / Tests (push) Has been skipped
CI / Format (pull_request) Failing after 3s
CI / Deploy MCP (push) Has been cancelled
CI / Deploy Docs (push) Has been cancelled
CI / Deploy Agent (push) Has been cancelled
CI / Deploy Dashboard (push) Has been cancelled
CI / Detect Changes (push) Has been cancelled
CI / Clippy (pull_request) Failing after 2m40s
CI / Security Audit (pull_request) Has been skipped
CI / Tests (pull_request) Has been skipped
CI / Detect Changes (pull_request) Has been skipped
CI / Deploy Agent (pull_request) Has been skipped
CI / Deploy Dashboard (pull_request) Has been skipped
CI / Deploy Docs (pull_request) Has been skipped
CI / Deploy MCP (pull_request) Has been skipped
- Add MCP_ENDPOINT_URL env var to configure MCP server base URL - Seed three default MCP server configs on dashboard startup if not present - Each server has its own tool subset: findings (3 tools), SBOM (2 tools), DAST (2 tools) - Uses upsert-by-name to avoid duplicates on restart Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
54 lines
1.1 KiB
Plaintext
54 lines
1.1 KiB
Plaintext
# MongoDB
|
|
MONGODB_URI=mongodb://root:example@localhost:27017/compliance_scanner?authSource=admin
|
|
MONGODB_DATABASE=compliance_scanner
|
|
|
|
# LiteLLM
|
|
LITELLM_URL=http://localhost:4000
|
|
LITELLM_API_KEY=
|
|
LITELLM_MODEL=gpt-4o
|
|
|
|
# GitHub
|
|
GITHUB_TOKEN=
|
|
GITHUB_WEBHOOK_SECRET=
|
|
|
|
# GitLab
|
|
GITLAB_URL=https://gitlab.com
|
|
GITLAB_TOKEN=
|
|
GITLAB_WEBHOOK_SECRET=
|
|
|
|
# Jira
|
|
JIRA_URL=https://your-org.atlassian.net
|
|
JIRA_EMAIL=
|
|
JIRA_API_TOKEN=
|
|
JIRA_PROJECT_KEY=
|
|
|
|
# SearXNG
|
|
SEARXNG_URL=http://localhost:8888
|
|
|
|
# NVD
|
|
NVD_API_KEY=
|
|
|
|
# Agent
|
|
AGENT_PORT=3001
|
|
SCAN_SCHEDULE=0 0 */6 * * *
|
|
CVE_MONITOR_SCHEDULE=0 0 0 * * *
|
|
GIT_CLONE_BASE_PATH=/tmp/compliance-scanner/repos
|
|
|
|
# Dashboard
|
|
DASHBOARD_PORT=8080
|
|
AGENT_API_URL=http://localhost:3001
|
|
|
|
# MCP Server
|
|
MCP_ENDPOINT_URL=http://localhost:8090
|
|
|
|
# Keycloak (required for authentication)
|
|
KEYCLOAK_URL=http://localhost:8080
|
|
KEYCLOAK_REALM=compliance
|
|
KEYCLOAK_CLIENT_ID=compliance-dashboard
|
|
REDIRECT_URI=http://localhost:8080/auth/callback
|
|
APP_URL=http://localhost:8080
|
|
|
|
# OpenTelemetry (optional - omit to disable)
|
|
# OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:4317
|
|
# OTEL_SERVICE_NAME=compliance-agent
|