integrate secretvalidation-wrapper part 1 #3365

.github/workflows/_build+publish-pds-solution.yml

@@ -71,6 +71,7 @@ jobs:
           export PREPARE_WRAPPER_VERSION
           export PMD_VERSION
           export SCANCODE_VERSION
+          export SECRETVALIDATION_WRAPPER_VERSION
           export SPDX_TOOL_VERSION
           export TERN_VERSION
           export XRAY_WRAPPER_VERSION

.gitignore

@@ -64,6 +64,7 @@ java-gen/
 # Containerized solutions
 copy/
 !copy/README.adoc
+!copy/README.md
 
 *.deb
 *.apk

sechub-pds-solutions/gitleaks/copy/README.md

@@ -0,0 +1,8 @@
+# Purpose of this directory
+The purpose of this directory is to place a secretvalidation-wrapper .jar into here.
+
+When the build is started with "copy" as BUILD_TYPE then the file
+"sechub-wrapper-secretvalidation-${SECRETVALIDATION_WRAPPER_VERSION}.jar
+will be copied into the container.
+
+This way pds-gitleaks containers with a custon secretvalidation-wrapper .jar can be built.

sechub-pds-solutions/gitleaks/env

@@ -6,3 +6,13 @@ BASE_IMAGE="ghcr.io/mercedes-benz/sechub/pds-base"
 # The gitleaks version to use
 # See: https://github.com/gitleaks/gitleaks/releases
 GITLEAKS_VERSION="8.18.4"
+
+# The build type of the Secret-Validation-Wrapper
+# Possible values are:
+# - copy (copies a local jar into container)
+# - download (downloads the jar from github.com releases)
+BUILD_TYPE=download
+
+# The Secret-Validation Wrapper version to use
+# See: https://github.com/mercedes-benz/sechub/releases
+SECRETVALIDATION_WRAPPER_VERSION="1.0.0"

sechub-pds-solutions/xray/copy/README.md

@@ -0,0 +1,8 @@
+# Purpose of this directory
+The purpose of this directory is to place a xray-wrapper .jar into here.
+
+When the build is started with "copy" as BUILD_TYPE then the file
+"sechub-wrapper-xray-${XRAY_WRAPPER_VERSION}.jar
+will be copied into the container.
+
+This way pds-xray containers with a custon xray-wrapper .jar can be built.