terraform-ibm-modules / terraform-ibm-rag-sample-da

A deployable architecture solution to deploy RAG resources.
Apache License 2.0
2 stars 0 forks source link

Make app-url available for CC pipeline #172

Open in-1911 opened 3 days ago

in-1911 commented 3 days ago

Description

The SCC checks in AI Guardrails profile require a dynamic scan in the CC pipeline run. To enable the dynamic scanning, the following properties need to be set in the pipeline or a at least the manual trigger:

The app-url needs to be retrieved from the application in CD project, presumably in the CD pipeline run. Likely it needs to be stored in an inventory to be able to fetch it in CC run.

New or affected modules


By submitting this issue, you agree to follow our Code of Conduct

brendankellyibm commented 3 days ago

Initial thoughts:

in-1911 commented 3 days ago

We can start with that, at least some dynamic scan results will be in CC. Is there a different way to pass the app url? Inventory may not be the proper channel as well - it seems to be more related to the application components / artifacts, so may be only CI is supposed to update it?