Environment files and variables

Using environment files

Note that some configurations use environment files; for example, configuring web server, proxy, or external PostgreSQL settings. The environment files to configure these settings are located in the docker-swarm directory.

To configure settings that use environment files:

• To set configuration settings before installing Black Duck, edit the file as described below and save your changes.

• To modify existing settings after installing Black Duck, modify the settings and then redeploy the services in the stack.

Environment variables and scanning binaries

When you scan binaries with Black Duck - Binary Analysis (BDBA), you must ensure that the HUB_SCAN_ALLOW_PARTIAL= 'true' parameter is added to the Job Runner container environment variables to surface components without versions in the BOM. The BDBA scanner, unlike Black Duck scanning, surfaces components without a version when version string information is not discernible in the binary. On the BOM, the component will have a question mark () beside the name to signal to the user that this component needs to be reviewed before security vulnerabilities are assigned to the component as Black Duck requires a version to map security vulnerabilities to a component.