ibm 1.78.0 published on Wednesday, Apr 30, 2025 by ibm-cloud
ibm.getCdToolchainToolSecuritycompliance
Explore with Pulumi AI
Provides a read-only data source to retrieve information about a cd_toolchain_tool_securitycompliance. You can then reference the fields of the data source in other resources within the same configuration by using interpolation syntax.
See the tool integration page for more information.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as ibm from "@pulumi/ibm";
const cdToolchainToolSecuritycompliance = ibm.getCdToolchainToolSecuritycompliance({
toolId: "9603dcd4-3c86-44f8-8d0a-9427369878cf",
toolchainId: data.ibm_cd_toolchain.cd_toolchain.id,
});
import pulumi
import pulumi_ibm as ibm
cd_toolchain_tool_securitycompliance = ibm.get_cd_toolchain_tool_securitycompliance(tool_id="9603dcd4-3c86-44f8-8d0a-9427369878cf",
toolchain_id=data["ibm_cd_toolchain"]["cd_toolchain"]["id"])
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/ibm/ibm"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := ibm.LookupCdToolchainToolSecuritycompliance(ctx, &ibm.LookupCdToolchainToolSecuritycomplianceArgs{
ToolId: "9603dcd4-3c86-44f8-8d0a-9427369878cf",
ToolchainId: data.Ibm_cd_toolchain.Cd_toolchain.Id,
}, nil)
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Ibm = Pulumi.Ibm;
return await Deployment.RunAsync(() =>
{
var cdToolchainToolSecuritycompliance = Ibm.GetCdToolchainToolSecuritycompliance.Invoke(new()
{
ToolId = "9603dcd4-3c86-44f8-8d0a-9427369878cf",
ToolchainId = data.Ibm_cd_toolchain.Cd_toolchain.Id,
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.ibm.IbmFunctions;
import com.pulumi.ibm.inputs.GetCdToolchainToolSecuritycomplianceArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var cdToolchainToolSecuritycompliance = IbmFunctions.getCdToolchainToolSecuritycompliance(GetCdToolchainToolSecuritycomplianceArgs.builder()
.toolId("9603dcd4-3c86-44f8-8d0a-9427369878cf")
.toolchainId(data.ibm_cd_toolchain().cd_toolchain().id())
.build());
}
}
variables:
cdToolchainToolSecuritycompliance:
fn::invoke:
function: ibm:getCdToolchainToolSecuritycompliance
arguments:
toolId: 9603dcd4-3c86-44f8-8d0a-9427369878cf
toolchainId: ${data.ibm_cd_toolchain.cd_toolchain.id}
Using getCdToolchainToolSecuritycompliance
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getCdToolchainToolSecuritycompliance(args: GetCdToolchainToolSecuritycomplianceArgs, opts?: InvokeOptions): Promise<GetCdToolchainToolSecuritycomplianceResult>
function getCdToolchainToolSecuritycomplianceOutput(args: GetCdToolchainToolSecuritycomplianceOutputArgs, opts?: InvokeOptions): Output<GetCdToolchainToolSecuritycomplianceResult>
def get_cd_toolchain_tool_securitycompliance(id: Optional[str] = None,
tool_id: Optional[str] = None,
toolchain_id: Optional[str] = None,
opts: Optional[InvokeOptions] = None) -> GetCdToolchainToolSecuritycomplianceResult
def get_cd_toolchain_tool_securitycompliance_output(id: Optional[pulumi.Input[str]] = None,
tool_id: Optional[pulumi.Input[str]] = None,
toolchain_id: Optional[pulumi.Input[str]] = None,
opts: Optional[InvokeOptions] = None) -> Output[GetCdToolchainToolSecuritycomplianceResult]
func LookupCdToolchainToolSecuritycompliance(ctx *Context, args *LookupCdToolchainToolSecuritycomplianceArgs, opts ...InvokeOption) (*LookupCdToolchainToolSecuritycomplianceResult, error)
func LookupCdToolchainToolSecuritycomplianceOutput(ctx *Context, args *LookupCdToolchainToolSecuritycomplianceOutputArgs, opts ...InvokeOption) LookupCdToolchainToolSecuritycomplianceResultOutput
> Note: This function is named LookupCdToolchainToolSecuritycompliance
in the Go SDK.
public static class GetCdToolchainToolSecuritycompliance
{
public static Task<GetCdToolchainToolSecuritycomplianceResult> InvokeAsync(GetCdToolchainToolSecuritycomplianceArgs args, InvokeOptions? opts = null)
public static Output<GetCdToolchainToolSecuritycomplianceResult> Invoke(GetCdToolchainToolSecuritycomplianceInvokeArgs args, InvokeOptions? opts = null)
}
public static CompletableFuture<GetCdToolchainToolSecuritycomplianceResult> getCdToolchainToolSecuritycompliance(GetCdToolchainToolSecuritycomplianceArgs args, InvokeOptions options)
public static Output<GetCdToolchainToolSecuritycomplianceResult> getCdToolchainToolSecuritycompliance(GetCdToolchainToolSecuritycomplianceArgs args, InvokeOptions options)
fn::invoke:
function: ibm:index/getCdToolchainToolSecuritycompliance:getCdToolchainToolSecuritycompliance
arguments:
# arguments dictionary
The following arguments are supported:
- Tool
Id string - ID of the tool bound to the toolchain.
- Constraints: The maximum length is
36
characters. The minimum length is36
characters. The value must match regular expression/^[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-4[a-fA-F0-9]{3}-[89abAB][a-fA-F0-9]{3}-[a-fA-F0-9]{12}$/
.
- Constraints: The maximum length is
- Toolchain
Id string - ID of the toolchain.
- Constraints: The maximum length is
36
characters. The minimum length is36
characters. The value must match regular expression/^[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-4[a-fA-F0-9]{3}-[89abAB][a-fA-F0-9]{3}-[a-fA-F0-9]{12}$/
.
- Constraints: The maximum length is
- Id string
- The unique identifier of the cd_toolchain_tool_securitycompliance.
- Tool
Id string - ID of the tool bound to the toolchain.
- Constraints: The maximum length is
36
characters. The minimum length is36
characters. The value must match regular expression/^[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-4[a-fA-F0-9]{3}-[89abAB][a-fA-F0-9]{3}-[a-fA-F0-9]{12}$/
.
- Constraints: The maximum length is
- Toolchain
Id string - ID of the toolchain.
- Constraints: The maximum length is
36
characters. The minimum length is36
characters. The value must match regular expression/^[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-4[a-fA-F0-9]{3}-[89abAB][a-fA-F0-9]{3}-[a-fA-F0-9]{12}$/
.
- Constraints: The maximum length is
- Id string
- The unique identifier of the cd_toolchain_tool_securitycompliance.
- tool
Id String - ID of the tool bound to the toolchain.
- Constraints: The maximum length is
36
characters. The minimum length is36
characters. The value must match regular expression/^[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-4[a-fA-F0-9]{3}-[89abAB][a-fA-F0-9]{3}-[a-fA-F0-9]{12}$/
.
- Constraints: The maximum length is
- toolchain
Id String - ID of the toolchain.
- Constraints: The maximum length is
36
characters. The minimum length is36
characters. The value must match regular expression/^[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-4[a-fA-F0-9]{3}-[89abAB][a-fA-F0-9]{3}-[a-fA-F0-9]{12}$/
.
- Constraints: The maximum length is
- id String
- The unique identifier of the cd_toolchain_tool_securitycompliance.
- tool
Id string - ID of the tool bound to the toolchain.
- Constraints: The maximum length is
36
characters. The minimum length is36
characters. The value must match regular expression/^[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-4[a-fA-F0-9]{3}-[89abAB][a-fA-F0-9]{3}-[a-fA-F0-9]{12}$/
.
- Constraints: The maximum length is
- toolchain
Id string - ID of the toolchain.
- Constraints: The maximum length is
36
characters. The minimum length is36
characters. The value must match regular expression/^[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-4[a-fA-F0-9]{3}-[89abAB][a-fA-F0-9]{3}-[a-fA-F0-9]{12}$/
.
- Constraints: The maximum length is
- id string
- The unique identifier of the cd_toolchain_tool_securitycompliance.
- tool_
id str - ID of the tool bound to the toolchain.
- Constraints: The maximum length is
36
characters. The minimum length is36
characters. The value must match regular expression/^[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-4[a-fA-F0-9]{3}-[89abAB][a-fA-F0-9]{3}-[a-fA-F0-9]{12}$/
.
- Constraints: The maximum length is
- toolchain_
id str - ID of the toolchain.
- Constraints: The maximum length is
36
characters. The minimum length is36
characters. The value must match regular expression/^[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-4[a-fA-F0-9]{3}-[89abAB][a-fA-F0-9]{3}-[a-fA-F0-9]{12}$/
.
- Constraints: The maximum length is
- id str
- The unique identifier of the cd_toolchain_tool_securitycompliance.
- tool
Id String - ID of the tool bound to the toolchain.
- Constraints: The maximum length is
36
characters. The minimum length is36
characters. The value must match regular expression/^[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-4[a-fA-F0-9]{3}-[89abAB][a-fA-F0-9]{3}-[a-fA-F0-9]{12}$/
.
- Constraints: The maximum length is
- toolchain
Id String - ID of the toolchain.
- Constraints: The maximum length is
36
characters. The minimum length is36
characters. The value must match regular expression/^[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-4[a-fA-F0-9]{3}-[89abAB][a-fA-F0-9]{3}-[a-fA-F0-9]{12}$/
.
- Constraints: The maximum length is
- id String
- The unique identifier of the cd_toolchain_tool_securitycompliance.
getCdToolchainToolSecuritycompliance Result
The following output properties are available:
- Crn string
- (String) Tool CRN.
- Href string
- (String) URI representing the tool.
- Id string
- The unique identifier of the cd_toolchain_tool_securitycompliance.
- Name string
- (String) The name for this tool integration, shown on the toolchain page.
- Parameters
List<Get
Cd Toolchain Tool Securitycompliance Parameter> - (List) Unique key-value pairs representing parameters to be used to create the tool. A list of parameters for each tool integration can be found in the Configuring tool integrations page. Nested schema for parameters:
- Referents
List<Get
Cd Toolchain Tool Securitycompliance Referent> - (List) Information on URIs to access this resource through the UI or API. Nested schema for referent:
- Resource
Group stringId - (String) Resource group where the tool is located.
- State string
- (String) Current configuration state of the tool.
- Constraints: Allowable values are:
configured
,configuring
,misconfigured
,unconfigured
.
- Constraints: Allowable values are:
- Tool
Id string - Toolchain
Crn string - (String) CRN of toolchain which the tool is bound to.
- Toolchain
Id string - Updated
At string - (String) Latest tool update timestamp.
- Crn string
- (String) Tool CRN.
- Href string
- (String) URI representing the tool.
- Id string
- The unique identifier of the cd_toolchain_tool_securitycompliance.
- Name string
- (String) The name for this tool integration, shown on the toolchain page.
- Parameters
[]Get
Cd Toolchain Tool Securitycompliance Parameter - (List) Unique key-value pairs representing parameters to be used to create the tool. A list of parameters for each tool integration can be found in the Configuring tool integrations page. Nested schema for parameters:
- Referents
[]Get
Cd Toolchain Tool Securitycompliance Referent - (List) Information on URIs to access this resource through the UI or API. Nested schema for referent:
- Resource
Group stringId - (String) Resource group where the tool is located.
- State string
- (String) Current configuration state of the tool.
- Constraints: Allowable values are:
configured
,configuring
,misconfigured
,unconfigured
.
- Constraints: Allowable values are:
- Tool
Id string - Toolchain
Crn string - (String) CRN of toolchain which the tool is bound to.
- Toolchain
Id string - Updated
At string - (String) Latest tool update timestamp.
- crn String
- (String) Tool CRN.
- href String
- (String) URI representing the tool.
- id String
- The unique identifier of the cd_toolchain_tool_securitycompliance.
- name String
- (String) The name for this tool integration, shown on the toolchain page.
- parameters
List<Get
Cd Toolchain Tool Securitycompliance Parameter> - (List) Unique key-value pairs representing parameters to be used to create the tool. A list of parameters for each tool integration can be found in the Configuring tool integrations page. Nested schema for parameters:
- referents
List<Get
Cd Toolchain Tool Securitycompliance Referent> - (List) Information on URIs to access this resource through the UI or API. Nested schema for referent:
- resource
Group StringId - (String) Resource group where the tool is located.
- state String
- (String) Current configuration state of the tool.
- Constraints: Allowable values are:
configured
,configuring
,misconfigured
,unconfigured
.
- Constraints: Allowable values are:
- tool
Id String - toolchain
Crn String - (String) CRN of toolchain which the tool is bound to.
- toolchain
Id String - updated
At String - (String) Latest tool update timestamp.
- crn string
- (String) Tool CRN.
- href string
- (String) URI representing the tool.
- id string
- The unique identifier of the cd_toolchain_tool_securitycompliance.
- name string
- (String) The name for this tool integration, shown on the toolchain page.
- parameters
Get
Cd Toolchain Tool Securitycompliance Parameter[] - (List) Unique key-value pairs representing parameters to be used to create the tool. A list of parameters for each tool integration can be found in the Configuring tool integrations page. Nested schema for parameters:
- referents
Get
Cd Toolchain Tool Securitycompliance Referent[] - (List) Information on URIs to access this resource through the UI or API. Nested schema for referent:
- resource
Group stringId - (String) Resource group where the tool is located.
- state string
- (String) Current configuration state of the tool.
- Constraints: Allowable values are:
configured
,configuring
,misconfigured
,unconfigured
.
- Constraints: Allowable values are:
- tool
Id string - toolchain
Crn string - (String) CRN of toolchain which the tool is bound to.
- toolchain
Id string - updated
At string - (String) Latest tool update timestamp.
- crn str
- (String) Tool CRN.
- href str
- (String) URI representing the tool.
- id str
- The unique identifier of the cd_toolchain_tool_securitycompliance.
- name str
- (String) The name for this tool integration, shown on the toolchain page.
- parameters
Sequence[Get
Cd Toolchain Tool Securitycompliance Parameter] - (List) Unique key-value pairs representing parameters to be used to create the tool. A list of parameters for each tool integration can be found in the Configuring tool integrations page. Nested schema for parameters:
- referents
Sequence[Get
Cd Toolchain Tool Securitycompliance Referent] - (List) Information on URIs to access this resource through the UI or API. Nested schema for referent:
- resource_
group_ strid - (String) Resource group where the tool is located.
- state str
- (String) Current configuration state of the tool.
- Constraints: Allowable values are:
configured
,configuring
,misconfigured
,unconfigured
.
- Constraints: Allowable values are:
- tool_
id str - toolchain_
crn str - (String) CRN of toolchain which the tool is bound to.
- toolchain_
id str - updated_
at str - (String) Latest tool update timestamp.
- crn String
- (String) Tool CRN.
- href String
- (String) URI representing the tool.
- id String
- The unique identifier of the cd_toolchain_tool_securitycompliance.
- name String
- (String) The name for this tool integration, shown on the toolchain page.
- parameters List<Property Map>
- (List) Unique key-value pairs representing parameters to be used to create the tool. A list of parameters for each tool integration can be found in the Configuring tool integrations page. Nested schema for parameters:
- referents List<Property Map>
- (List) Information on URIs to access this resource through the UI or API. Nested schema for referent:
- resource
Group StringId - (String) Resource group where the tool is located.
- state String
- (String) Current configuration state of the tool.
- Constraints: Allowable values are:
configured
,configuring
,misconfigured
,unconfigured
.
- Constraints: Allowable values are:
- tool
Id String - toolchain
Crn String - (String) CRN of toolchain which the tool is bound to.
- toolchain
Id String - updated
At String - (String) Latest tool update timestamp.
Supporting Types
GetCdToolchainToolSecuritycomplianceParameter
- Attachment
Id string - (String) An attachment ID. An attachment is configured under a profile to define how a scan will be run. To find the attachment ID, in the browser, in the attachments list, click on the attachment link, and a panel appears with a button to copy the attachment ID. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
.- Constraints: The value must match regular expression
/^[-0-9a-f]{32,36}$/
.
- Constraints: The value must match regular expression
- Evidence
Namespace string - (String) The kind of pipeline evidence to be displayed in Security and Compliance Center for this toolchain. The values are;
cd
which will use evidence generated by a Continuous Deployment (CD) pipeline, orcc
which will use evidence generated by a Continuous Compliance (CC) pipeline. The default behavior is to use the CD evidence.- Constraints: Allowable values are:
cd
,cc
.
- Constraints: Allowable values are:
- Evidence
Repo stringUrl - (String) The URL to a Git repository evidence locker. The DevSecOps toolchain templates will collect and store evidence for scans and tasks in an evidence repository. This evidence URL should match the
repo_url
for a Git tool integration in this toolchain. The DevSecOps toolchain goals in the Security and Compliance Center will check the evidence repository for the pass or fail results for those goals. - Instance
Crn string - (String) The Security and Compliance Center service instance CRN (Cloud Resource Name). It is recommended to provide an instance CRN, but when absent, the oldest service instance will be used. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
.- Constraints: The value must match regular expression
/^crn:v1:(?:bluemix|staging):public:compliance:[a-zA-Z0-9-]*\\b:a\/[0-9a-fA-F]*\\b:[0-9a-fA-F]{8}\\b-[0-9a-fA-F]{4}\\b-[0-9a-fA-F]{4}\\b-[0-9a-fA-F]{4}\\b-[0-9a-fA-F]{12}\\b::$/
.
- Constraints: The value must match regular expression
- Name string
- (String) The name for this tool integration, shown on the toolchain page.
- Profile
Name string - (String) The name of a Security and Compliance Center profile. Usually, use the "IBM Cloud Framework for Financial Services" predefined profile, which contains the DevSecOps Toolchain rules. Or use a user-authored customized profile that has been configured to contain those rules. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
. - Profile
Version string - (String) The version of a Security and Compliance Center profile, in SemVer format, like '0.0.0'. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
. - Scc
Api stringKey - (String) The IBM Cloud API key used to access the Security and Compliance Center service, for the use profile with attachment setting. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
. You can use a toolchain secret reference for this parameter. For more information, see Protecting your sensitive data in Continuous Delivery. - Use
Profile stringAttachment - (String) Set to
enabled
to enable use profile with attachment, so that the scripts in the pipeline can interact with the Security and Compliance Center service to perform pre-deploy validation against compliance rules for Continuous Deployment (CD) and compliance monitoring for Continuous Compliance (CC). When enabled, other parameters become relevant;scc_api_key
,instance_crn
,profile_name
,profile_version
,attachment_id
.- Constraints: Allowable values are:
disabled
,enabled
.
- Constraints: Allowable values are:
- Attachment
Id string - (String) An attachment ID. An attachment is configured under a profile to define how a scan will be run. To find the attachment ID, in the browser, in the attachments list, click on the attachment link, and a panel appears with a button to copy the attachment ID. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
.- Constraints: The value must match regular expression
/^[-0-9a-f]{32,36}$/
.
- Constraints: The value must match regular expression
- Evidence
Namespace string - (String) The kind of pipeline evidence to be displayed in Security and Compliance Center for this toolchain. The values are;
cd
which will use evidence generated by a Continuous Deployment (CD) pipeline, orcc
which will use evidence generated by a Continuous Compliance (CC) pipeline. The default behavior is to use the CD evidence.- Constraints: Allowable values are:
cd
,cc
.
- Constraints: Allowable values are:
- Evidence
Repo stringUrl - (String) The URL to a Git repository evidence locker. The DevSecOps toolchain templates will collect and store evidence for scans and tasks in an evidence repository. This evidence URL should match the
repo_url
for a Git tool integration in this toolchain. The DevSecOps toolchain goals in the Security and Compliance Center will check the evidence repository for the pass or fail results for those goals. - Instance
Crn string - (String) The Security and Compliance Center service instance CRN (Cloud Resource Name). It is recommended to provide an instance CRN, but when absent, the oldest service instance will be used. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
.- Constraints: The value must match regular expression
/^crn:v1:(?:bluemix|staging):public:compliance:[a-zA-Z0-9-]*\\b:a\/[0-9a-fA-F]*\\b:[0-9a-fA-F]{8}\\b-[0-9a-fA-F]{4}\\b-[0-9a-fA-F]{4}\\b-[0-9a-fA-F]{4}\\b-[0-9a-fA-F]{12}\\b::$/
.
- Constraints: The value must match regular expression
- Name string
- (String) The name for this tool integration, shown on the toolchain page.
- Profile
Name string - (String) The name of a Security and Compliance Center profile. Usually, use the "IBM Cloud Framework for Financial Services" predefined profile, which contains the DevSecOps Toolchain rules. Or use a user-authored customized profile that has been configured to contain those rules. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
. - Profile
Version string - (String) The version of a Security and Compliance Center profile, in SemVer format, like '0.0.0'. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
. - Scc
Api stringKey - (String) The IBM Cloud API key used to access the Security and Compliance Center service, for the use profile with attachment setting. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
. You can use a toolchain secret reference for this parameter. For more information, see Protecting your sensitive data in Continuous Delivery. - Use
Profile stringAttachment - (String) Set to
enabled
to enable use profile with attachment, so that the scripts in the pipeline can interact with the Security and Compliance Center service to perform pre-deploy validation against compliance rules for Continuous Deployment (CD) and compliance monitoring for Continuous Compliance (CC). When enabled, other parameters become relevant;scc_api_key
,instance_crn
,profile_name
,profile_version
,attachment_id
.- Constraints: Allowable values are:
disabled
,enabled
.
- Constraints: Allowable values are:
- attachment
Id String - (String) An attachment ID. An attachment is configured under a profile to define how a scan will be run. To find the attachment ID, in the browser, in the attachments list, click on the attachment link, and a panel appears with a button to copy the attachment ID. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
.- Constraints: The value must match regular expression
/^[-0-9a-f]{32,36}$/
.
- Constraints: The value must match regular expression
- evidence
Namespace String - (String) The kind of pipeline evidence to be displayed in Security and Compliance Center for this toolchain. The values are;
cd
which will use evidence generated by a Continuous Deployment (CD) pipeline, orcc
which will use evidence generated by a Continuous Compliance (CC) pipeline. The default behavior is to use the CD evidence.- Constraints: Allowable values are:
cd
,cc
.
- Constraints: Allowable values are:
- evidence
Repo StringUrl - (String) The URL to a Git repository evidence locker. The DevSecOps toolchain templates will collect and store evidence for scans and tasks in an evidence repository. This evidence URL should match the
repo_url
for a Git tool integration in this toolchain. The DevSecOps toolchain goals in the Security and Compliance Center will check the evidence repository for the pass or fail results for those goals. - instance
Crn String - (String) The Security and Compliance Center service instance CRN (Cloud Resource Name). It is recommended to provide an instance CRN, but when absent, the oldest service instance will be used. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
.- Constraints: The value must match regular expression
/^crn:v1:(?:bluemix|staging):public:compliance:[a-zA-Z0-9-]*\\b:a\/[0-9a-fA-F]*\\b:[0-9a-fA-F]{8}\\b-[0-9a-fA-F]{4}\\b-[0-9a-fA-F]{4}\\b-[0-9a-fA-F]{4}\\b-[0-9a-fA-F]{12}\\b::$/
.
- Constraints: The value must match regular expression
- name String
- (String) The name for this tool integration, shown on the toolchain page.
- profile
Name String - (String) The name of a Security and Compliance Center profile. Usually, use the "IBM Cloud Framework for Financial Services" predefined profile, which contains the DevSecOps Toolchain rules. Or use a user-authored customized profile that has been configured to contain those rules. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
. - profile
Version String - (String) The version of a Security and Compliance Center profile, in SemVer format, like '0.0.0'. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
. - scc
Api StringKey - (String) The IBM Cloud API key used to access the Security and Compliance Center service, for the use profile with attachment setting. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
. You can use a toolchain secret reference for this parameter. For more information, see Protecting your sensitive data in Continuous Delivery. - use
Profile StringAttachment - (String) Set to
enabled
to enable use profile with attachment, so that the scripts in the pipeline can interact with the Security and Compliance Center service to perform pre-deploy validation against compliance rules for Continuous Deployment (CD) and compliance monitoring for Continuous Compliance (CC). When enabled, other parameters become relevant;scc_api_key
,instance_crn
,profile_name
,profile_version
,attachment_id
.- Constraints: Allowable values are:
disabled
,enabled
.
- Constraints: Allowable values are:
- attachment
Id string - (String) An attachment ID. An attachment is configured under a profile to define how a scan will be run. To find the attachment ID, in the browser, in the attachments list, click on the attachment link, and a panel appears with a button to copy the attachment ID. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
.- Constraints: The value must match regular expression
/^[-0-9a-f]{32,36}$/
.
- Constraints: The value must match regular expression
- evidence
Namespace string - (String) The kind of pipeline evidence to be displayed in Security and Compliance Center for this toolchain. The values are;
cd
which will use evidence generated by a Continuous Deployment (CD) pipeline, orcc
which will use evidence generated by a Continuous Compliance (CC) pipeline. The default behavior is to use the CD evidence.- Constraints: Allowable values are:
cd
,cc
.
- Constraints: Allowable values are:
- evidence
Repo stringUrl - (String) The URL to a Git repository evidence locker. The DevSecOps toolchain templates will collect and store evidence for scans and tasks in an evidence repository. This evidence URL should match the
repo_url
for a Git tool integration in this toolchain. The DevSecOps toolchain goals in the Security and Compliance Center will check the evidence repository for the pass or fail results for those goals. - instance
Crn string - (String) The Security and Compliance Center service instance CRN (Cloud Resource Name). It is recommended to provide an instance CRN, but when absent, the oldest service instance will be used. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
.- Constraints: The value must match regular expression
/^crn:v1:(?:bluemix|staging):public:compliance:[a-zA-Z0-9-]*\\b:a\/[0-9a-fA-F]*\\b:[0-9a-fA-F]{8}\\b-[0-9a-fA-F]{4}\\b-[0-9a-fA-F]{4}\\b-[0-9a-fA-F]{4}\\b-[0-9a-fA-F]{12}\\b::$/
.
- Constraints: The value must match regular expression
- name string
- (String) The name for this tool integration, shown on the toolchain page.
- profile
Name string - (String) The name of a Security and Compliance Center profile. Usually, use the "IBM Cloud Framework for Financial Services" predefined profile, which contains the DevSecOps Toolchain rules. Or use a user-authored customized profile that has been configured to contain those rules. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
. - profile
Version string - (String) The version of a Security and Compliance Center profile, in SemVer format, like '0.0.0'. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
. - scc
Api stringKey - (String) The IBM Cloud API key used to access the Security and Compliance Center service, for the use profile with attachment setting. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
. You can use a toolchain secret reference for this parameter. For more information, see Protecting your sensitive data in Continuous Delivery. - use
Profile stringAttachment - (String) Set to
enabled
to enable use profile with attachment, so that the scripts in the pipeline can interact with the Security and Compliance Center service to perform pre-deploy validation against compliance rules for Continuous Deployment (CD) and compliance monitoring for Continuous Compliance (CC). When enabled, other parameters become relevant;scc_api_key
,instance_crn
,profile_name
,profile_version
,attachment_id
.- Constraints: Allowable values are:
disabled
,enabled
.
- Constraints: Allowable values are:
- attachment_
id str - (String) An attachment ID. An attachment is configured under a profile to define how a scan will be run. To find the attachment ID, in the browser, in the attachments list, click on the attachment link, and a panel appears with a button to copy the attachment ID. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
.- Constraints: The value must match regular expression
/^[-0-9a-f]{32,36}$/
.
- Constraints: The value must match regular expression
- evidence_
namespace str - (String) The kind of pipeline evidence to be displayed in Security and Compliance Center for this toolchain. The values are;
cd
which will use evidence generated by a Continuous Deployment (CD) pipeline, orcc
which will use evidence generated by a Continuous Compliance (CC) pipeline. The default behavior is to use the CD evidence.- Constraints: Allowable values are:
cd
,cc
.
- Constraints: Allowable values are:
- evidence_
repo_ strurl - (String) The URL to a Git repository evidence locker. The DevSecOps toolchain templates will collect and store evidence for scans and tasks in an evidence repository. This evidence URL should match the
repo_url
for a Git tool integration in this toolchain. The DevSecOps toolchain goals in the Security and Compliance Center will check the evidence repository for the pass or fail results for those goals. - instance_
crn str - (String) The Security and Compliance Center service instance CRN (Cloud Resource Name). It is recommended to provide an instance CRN, but when absent, the oldest service instance will be used. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
.- Constraints: The value must match regular expression
/^crn:v1:(?:bluemix|staging):public:compliance:[a-zA-Z0-9-]*\\b:a\/[0-9a-fA-F]*\\b:[0-9a-fA-F]{8}\\b-[0-9a-fA-F]{4}\\b-[0-9a-fA-F]{4}\\b-[0-9a-fA-F]{4}\\b-[0-9a-fA-F]{12}\\b::$/
.
- Constraints: The value must match regular expression
- name str
- (String) The name for this tool integration, shown on the toolchain page.
- profile_
name str - (String) The name of a Security and Compliance Center profile. Usually, use the "IBM Cloud Framework for Financial Services" predefined profile, which contains the DevSecOps Toolchain rules. Or use a user-authored customized profile that has been configured to contain those rules. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
. - profile_
version str - (String) The version of a Security and Compliance Center profile, in SemVer format, like '0.0.0'. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
. - scc_
api_ strkey - (String) The IBM Cloud API key used to access the Security and Compliance Center service, for the use profile with attachment setting. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
. You can use a toolchain secret reference for this parameter. For more information, see Protecting your sensitive data in Continuous Delivery. - use_
profile_ strattachment - (String) Set to
enabled
to enable use profile with attachment, so that the scripts in the pipeline can interact with the Security and Compliance Center service to perform pre-deploy validation against compliance rules for Continuous Deployment (CD) and compliance monitoring for Continuous Compliance (CC). When enabled, other parameters become relevant;scc_api_key
,instance_crn
,profile_name
,profile_version
,attachment_id
.- Constraints: Allowable values are:
disabled
,enabled
.
- Constraints: Allowable values are:
- attachment
Id String - (String) An attachment ID. An attachment is configured under a profile to define how a scan will be run. To find the attachment ID, in the browser, in the attachments list, click on the attachment link, and a panel appears with a button to copy the attachment ID. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
.- Constraints: The value must match regular expression
/^[-0-9a-f]{32,36}$/
.
- Constraints: The value must match regular expression
- evidence
Namespace String - (String) The kind of pipeline evidence to be displayed in Security and Compliance Center for this toolchain. The values are;
cd
which will use evidence generated by a Continuous Deployment (CD) pipeline, orcc
which will use evidence generated by a Continuous Compliance (CC) pipeline. The default behavior is to use the CD evidence.- Constraints: Allowable values are:
cd
,cc
.
- Constraints: Allowable values are:
- evidence
Repo StringUrl - (String) The URL to a Git repository evidence locker. The DevSecOps toolchain templates will collect and store evidence for scans and tasks in an evidence repository. This evidence URL should match the
repo_url
for a Git tool integration in this toolchain. The DevSecOps toolchain goals in the Security and Compliance Center will check the evidence repository for the pass or fail results for those goals. - instance
Crn String - (String) The Security and Compliance Center service instance CRN (Cloud Resource Name). It is recommended to provide an instance CRN, but when absent, the oldest service instance will be used. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
.- Constraints: The value must match regular expression
/^crn:v1:(?:bluemix|staging):public:compliance:[a-zA-Z0-9-]*\\b:a\/[0-9a-fA-F]*\\b:[0-9a-fA-F]{8}\\b-[0-9a-fA-F]{4}\\b-[0-9a-fA-F]{4}\\b-[0-9a-fA-F]{4}\\b-[0-9a-fA-F]{12}\\b::$/
.
- Constraints: The value must match regular expression
- name String
- (String) The name for this tool integration, shown on the toolchain page.
- profile
Name String - (String) The name of a Security and Compliance Center profile. Usually, use the "IBM Cloud Framework for Financial Services" predefined profile, which contains the DevSecOps Toolchain rules. Or use a user-authored customized profile that has been configured to contain those rules. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
. - profile
Version String - (String) The version of a Security and Compliance Center profile, in SemVer format, like '0.0.0'. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
. - scc
Api StringKey - (String) The IBM Cloud API key used to access the Security and Compliance Center service, for the use profile with attachment setting. This parameter is only relevant when the
use_profile_attachment
parameter isenabled
. You can use a toolchain secret reference for this parameter. For more information, see Protecting your sensitive data in Continuous Delivery. - use
Profile StringAttachment - (String) Set to
enabled
to enable use profile with attachment, so that the scripts in the pipeline can interact with the Security and Compliance Center service to perform pre-deploy validation against compliance rules for Continuous Deployment (CD) and compliance monitoring for Continuous Compliance (CC). When enabled, other parameters become relevant;scc_api_key
,instance_crn
,profile_name
,profile_version
,attachment_id
.- Constraints: Allowable values are:
disabled
,enabled
.
- Constraints: Allowable values are:
GetCdToolchainToolSecuritycomplianceReferent
Package Details
- Repository
- ibm ibm-cloud/terraform-provider-ibm
- License
- Notes
- This Pulumi package is based on the
ibm
Terraform Provider.