tekton-task-fortify-ssc-login

Tekton Task for logging into Fortify

Usage

Supports Tekton git resolver:

taskRef:
  resolver: git
  params:
    - name: url
      value: https://azuredevops.alinma.internal/DevSecOps/tekton-tasks/_git/tekton-task-fortify-ssc-login
    - name: revision
      value: main
    - name: pathInRepo
      value: task/git-clone.yaml

Prerequisites

Create a Kubernetes Secret with SSC credentials:

apiVersion: v1
kind: Secret
metadata:
  name: fortify-ssc-credentials
type: Opaque
stringData:
  client-auth-token: "your-client-auth-token"
  ssc-token: "your-ssc-token"

Parameters

Name	Type	Default	Description
ssc-url	string	``	SSC URL
secret-name	string	fortify-ssc-credentials	Secret containing credentials

Workspaces

Name	Description
fcli-session	Stores session for sharing with other tasks

Results

Name	Description
session-status	authenticated or failed

Pipeline Usage

apiVersion: tekton.dev/v1
kind: Pipeline
spec:
  workspaces:
    - name: fcli-session
  tasks:
    - name: ssc-login
      taskRef:
        resolver: git
        params:
          - name: url
            value: https://azuredevops.alinma.internal/DevSecOps/tekton-tasks/_git/tekton-task-fortify-ssc-login
          - name: revision
            value: main
          - name: pathInRepo
            value: task/fortify-ssc-login.yaml
      workspaces:
        - name: fcli-session
          workspace: fcli-session
  finally:
    - name: ssc-logout
      taskRef:
        resolver: git
        params:
          - name: url
            value: https://azuredevops.alinma.internal/DevSecOps/tekton-tasks/_git/tekton-task-fortify-ssc-logout
          - name: revision
            value: main
          - name: pathInRepo
            value: task/fortify-ssc-logout.yaml
      workspaces:
        - name: fcli-session
          workspace: fcli-session