Creating secrets for your builds
When you building your pipelines, you might want to add tasks that require secrets in order to access external resources.
One such task is the sast-snyk-check task that that uses the third-party service snyk to perform static application security testing (SAST) as a part of the default Konflux pipeline. Use this procedure to upload your snyk.io token. Name the secret sast_snyk_task so that the snyk task in the Konflux pipeline will recognize it and use it.
|
-
In Konflux, from the left navigation menu, select Secrets.
-
From the Secrets page, click Add secret.
-
From the Add secret page, choose what stage of your application’s development you want to create a secret for: Build or Deployment.
-
Select a secret type:
-
Key/value secret
-
Image pull secret
-
Source secret
-
-
For Secret name, enter a unique name for your secret.
-
Under Key/value secret, expand Key/value 1, then enter a key.
-
For Upload the file with value for your key or paste its contents, do one of the following:
-
Click Upload to browse to, select, and upload the file that contains your key value.
-
Drag the file that contains your key value into the space under Upload.
-
Paste the contents of the file that contains your key value into the space under Upload. Click Clear to remove the contents of the space under Upload.
-
-
Optional: Click Add another key/value.
-
Optional: Under Labels, add a label to tag or provide more context for your secret.
-
Click Add secret.