From 82f25082fb12b59dd831c54a348d297279f18cd5 Mon Sep 17 00:00:00 2001 From: kodjomiles Date: Thu, 28 Nov 2024 01:00:53 +0000 Subject: [PATCH 1/3] - Restructured snyk integration docs --- .../code-quality-security/snyk/snyk.md | 234 ++++-------------- 1 file changed, 52 insertions(+), 182 deletions(-) diff --git a/docs/build-your-software-catalog/sync-data-to-catalog/code-quality-security/snyk/snyk.md b/docs/build-your-software-catalog/sync-data-to-catalog/code-quality-security/snyk/snyk.md index 1fbad1163..e058297e1 100644 --- a/docs/build-your-software-catalog/sync-data-to-catalog/code-quality-security/snyk/snyk.md +++ b/docs/build-your-software-catalog/sync-data-to-catalog/code-quality-security/snyk/snyk.md @@ -6,22 +6,30 @@ import SnykBlueprint from "/docs/build-your-software-catalog/custom-integration/ import SnykConfiguration from "/docs/build-your-software-catalog/custom-integration/webhook/examples/resources/snyk/\_example_snyk_vulnerability_webhook_configuration.mdx"; import PortApiRegionTip from "/docs/generalTemplates/_port_region_parameter_explanation_template.md" import OceanSaasInstallation from "/docs/build-your-software-catalog/sync-data-to-catalog/templates/_ocean_saas_installation.mdx" +import OceanRealtimeInstallation from "/docs/build-your-software-catalog/sync-data-to-catalog/templates/_ocean_realtime_installation.mdx" + # Snyk -Port's Snyk integration allows you to import `organizations`, `targets`, `projects` and `issues` from your Snyk account into Port, according to your mapping and definitions. +Port's Snyk integration allows you to model Snyk resources in your software catalog and ingest data into them. -## Common use cases +## Overview -- Map `organizations`, `targets`, `projects` and `issues` in your Snyk environment. -- Watch for object changes (create/update/delete) in real-time, and automatically apply the changes to your entities in Port. -- Create/delete Snyk objects using self-service actions. +This integration allows you to: -## Prerequisites +- Map and organize your desired Snyk resources and their metadata in Port (see supported resources below). +- Watch for Snyk object changes (create/update/delete) in real-time, and automatically apply the changes to your entities in Port. - +### Supported Resources + +The resources that can be ingested from Snyk into Port are listed below. it is possible to reference any field that appears in the API responses linked below in the mapping configuration. + +- [`Organization`](https://snyk.docs.apiary.io/#reference/organizations/the-snyk-organization-for-a-request/list-all-the-organizations-a-user-belongs-to) +- [`Target`](https://apidocs.snyk.io/?version=2023-08-21%7Ebeta#get-/orgs/-org_id-/targets) +- [`Project`](https://apidocs.snyk.io/?version=2023-08-21#get-/orgs/-org_id-/projects) +- [`Issue`](https://snyk.docs.apiary.io/#reference/projects/aggregated-project-issues/list-all-aggregated-issues) -## Installation +## Setup Choose one of the following installation methods: @@ -33,34 +41,15 @@ Choose one of the following installation methods: - + Using this installation option means that the integration will be able to update Port in real time using webhooks. -This table summarizes the available parameters for the installation. -Set them as you wish in the script below, then copy it and run it in your terminal: - - -| Parameter | Description | Required | -| ----------------------------------- | ------------------------------------------------------------------------------------------------------------------ | ------- | -| `port.clientId` | Your Port client id | ✅ | -| `port.clientSecret` | Your Port client secret | ✅ | -| `port.baseUrl` | Your Port API URL - `https://api.getport.io` for EU, `https://api.us.getport.io` for US | ✅ | -| `integration.identifier` | Change the identifier to describe your integration | ✅ | -| `integration.type` | The integration type | ✅ | -| `integration.eventListener.type` | The event listener type | ✅ | -| `integration.secrets.token` | The Snyk API token | ✅ | -| `integration.config.organizationId` | The Snyk organization ID. Fetches data for this organization when provided |❌ | -| `integration.config.groups` | A comma-separated list of Snyk group ids to filter data for. Fetches data for organizations within the specified groups |❌ | -| `integration.config.apiUrl` | The Snyk API URL. If not specified, the default will be https://api.snyk.io | ❌ | -| `integration.config.appHost` | The host of the Port Ocean app. Used to set up the integration endpoint as the target for Webhooks created in Snyk | ✅ | -| `integration.secret.webhookSecret` | This is a password you create, that Snyk uses to sign webhook events to Port | ❌ | -| `scheduledResyncInterval` | The number of minutes between each resync | ❌ | -| `initializePortResources` | Default true, When set to true the integration will create default blueprints and the port App config Mapping | ❌ | -| `sendRawDataExamples` | Enable sending raw data examples from the third party API to port for testing and managing the integration mapping. Default is true | ❌ | +

Prerequisites

+ -
+For details about the available parameters for the installation, see the table below. @@ -76,27 +65,14 @@ By default, the integration fetches all organizations associated with the provid If neither parameter is provided, the integration will operate with the default behavior of fetching all organizations associated with the supplied Snyk token. ::: -To install the integration using Helm, run the following command: - -```bash showLineNumbers -helm repo add --force-update port-labs https://port-labs.github.io/helm-charts -helm upgrade --install my-snyk-integration port-labs/port-ocean \ - --set port.clientId="PORT_CLIENT_ID" \ - --set port.clientSecret="PORT_CLIENT_SECRET" \ - --set port.baseUrl="https://api.getport.io" \ - --set initializePortResources=true \ - --set sendRawDataExamples=true \ - --set scheduledResyncInterval=120 \ - --set integration.identifier="my-snyk-integration" \ - --set integration.type="snyk" \ - --set integration.eventListener.type="POLLING" \ - --set integration.secrets.token="SNYK_TOKEN" -``` + + + -To install the integration using ArgoCD, follow these steps: +To install the integration using ArgoCD: 1. Create a `values.yaml` file in `argocd/my-ocean-snyk-integration` in your git repository with the content: @@ -226,11 +202,35 @@ kubectl apply -f my-ocean-snyk-integration.yaml +This table summarizes the available parameters for the installation. + + +| Parameter | Description | Required | +|-------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------|----------| +| `port.clientId` | Your Port client id | ✅ | +| `port.clientSecret` | Your Port client secret | ✅ | +| `port.baseUrl` | Your Port API URL - `https://api.getport.io` for EU, `https://api.us.getport.io` for US | ✅ | +| `integration.identifier` | Change the identifier to describe your integration | ✅ | +| `integration.type` | The integration type | ✅ | +| `integration.eventListener.type` | The event listener type | ✅ | +| `integration.secrets.token` | The Snyk API token | ✅ | +| `integration.config.organizationId` | The Snyk organization ID. Fetches data for this organization when provided | ❌ | +| `integration.config.groups` | A comma-separated list of Snyk group ids to filter data for. Fetches data for organizations within the specified groups | ❌ | +| `integration.config.apiUrl` | The Snyk API URL. If not specified, the default will be https://api.snyk.io | ❌ | +| `integration.config.appHost` | The host of the Port Ocean app. Used to set up the integration endpoint as the target for Webhooks created in Snyk | ✅ | +| `integration.secret.webhookSecret` | This is a password you create, that Snyk uses to sign webhook events to Port | ❌ | +| `scheduledResyncInterval` | The number of minutes between each resync | ❌ | +| `initializePortResources` | Default true, When set to true the integration will create default blueprints and the port App config Mapping | ❌ | +| `sendRawDataExamples` | Enable sending raw data examples from the third party API to port for testing and managing the integration mapping. Default is true | ❌ | + + +
+ - + By default, the integration fetches all organizations associated with the provided Snyk token. If you wish to customize access, the following parameters are available: @@ -505,141 +505,12 @@ ingest_data: -## Ingesting Snyk objects - -The Snyk integration uses a YAML configuration to describe the process of loading data into the developer portal. - -Here is an example snippet from the config which demonstrates the process for getting `project` data from Snyk: - -```yaml showLineNumbers -createMissingRelatedEntities: true -deleteDependentEntities: true -resources: - - kind: project - selector: - query: "true" - port: - entity: - mappings: - identifier: .id - title: .attributes.name - blueprint: '"snykProject"' - properties: - url: ("https://app.snyk.io/org/" + .relationships.organization.data.id + "/project/" + .id | tostring) - owner: .__owner.email - businessCriticality: .attributes.business_criticality - environment: .attributes.environment - lifeCycle: .attributes.lifecycle - highOpenVulnerabilities: .meta.latest_issue_counts.high - mediumOpenVulnerabilities: .meta.latest_issue_counts.medium - lowOpenVulnerabilities: .meta.latest_issue_counts.low - criticalOpenVulnerabilities: .meta.latest_issue_counts.critical - importedBy: .__importer.email - tags: .attributes.tags -``` - -The integration makes use of the [JQ JSON processor](https://stedolan.github.io/jq/manual/) to select, modify, concatenate, transform and perform other operations on existing fields and values from Snyk's API events. +## Configuration -:::note -In a case where an api request to Snyk's api will receive error code `SNYK-9999` which means that Snyk experienced an internal error, the resync will continue to export and log that error. This might result in some data missing from the portal. In such cases head to the Event Log inside the integration section and look for that error it will have all the information required to contact snyk to investigate that error -::: - -### Configuration structure - -The integration configuration determines which resources will be queried from Snyk, and which entities and properties will be created in Port. - -:::tip Supported resources -The following resources can be used to map data from Snyk, it is possible to reference any field that appears in the API responses linked below for the mapping configuration. - -- [`Organization`](https://snyk.docs.apiary.io/#reference/organizations/the-snyk-organization-for-a-request/list-all-the-organizations-a-user-belongs-to) -- [`Target`](https://apidocs.snyk.io/?version=2023-08-21%7Ebeta#get-/orgs/-org_id-/targets) -- [`Project`](https://apidocs.snyk.io/?version=2023-08-21#get-/orgs/-org_id-/projects) -- [`Issue`](https://snyk.docs.apiary.io/#reference/projects/aggregated-project-issues/list-all-aggregated-issues) - -::: +Port integrations use a [YAML mapping block](/build-your-software-catalog/customize-integrations/configure-mapping#configuration-structure) to ingest data from the third-party api into Port. -- The root key of the integration configuration is the `resources` key: - - ```yaml showLineNumbers - # highlight-next-line - resources: - - kind: project - selector: - ... - ``` - -- The `kind` key is a specifier for a Snyk object: - - ```yaml showLineNumbers - resources: - # highlight-next-line - - kind: project - selector: - ... - ``` - -- The `selector` and the `query` keys allow you to filter which objects of the specified `kind` will be ingested into your software catalog: - - ```yaml showLineNumbers - resources: - - kind: project - # highlight-start - selector: - query: "true" # JQ boolean expression. If evaluated to false - this object will be skipped. - # highlight-end - port: - ``` - -- The `port`, `entity` and the `mappings` keys are used to map the Snyk object fields to Port entities. To create multiple mappings of the same kind, you can add another item in the `resources` array; - - ```yaml showLineNumbers - resources: - - kind: project - selector: - query: "true" - port: - # highlight-start - entity: - mappings: # Mappings between one Snyk object to a Port entity. Each value is a JQ query. - identifier: .id - title: .attributes.name - blueprint: '"snykProject"' - properties: - url: ("https://app.snyk.io/org/" + .relationships.organization.data.id + "/project/" + .id | tostring) - businessCriticality: .attributes.business_criticality - environment: .attributes.environment - lifeCycle: .attributes.lifecycle - highOpenVulnerabilities: .meta.latest_issue_counts.high - mediumOpenVulnerabilities: .meta.latest_issue_counts.medium - lowOpenVulnerabilities: .meta.latest_issue_counts.low - criticalOpenVulnerabilities: .meta.latest_issue_counts.critical - tags: .attributes.tags - targetOrigin: .origin - relations: - snyk_target: '.relationships.target.data.id' - # highlight-end - - kind: project # In this instance project is mapped again with a different filter - selector: - query: '.name == "MyProjectName"' - port: - entity: - mappings: ... - ``` - - :::tip Blueprint key - Note the value of the `blueprint` key - if you want to use a hardcoded string, you need to encapsulate it in 2 sets of quotes, for example use a pair of single-quotes (`'`) and then another pair of double-quotes (`"`) - ::: - -### Ingest data into Port +The mapping makes use of the [JQ JSON processor](https://stedolan.github.io/jq/manual/) to select, modify, concatenate, transform and perform other operations on existing fields and values from the integration API. -To ingest Snyk objects using the [integration configuration](#configuration-structure), you can follow the steps below: - -1. Go to the DevPortal Builder page. -2. Select a blueprint you want to ingest using Snyk. -3. Choose the **Ingest Data** option from the menu. -4. Select Snyk under the Code quality & security providers category. -5. Modify the [configuration](#configuration-structure) according to your needs. -6. Click `Resync`. ## Examples @@ -701,7 +572,6 @@ resources: ``` - ### Target
From 29cbe181e581ca2ea2cf18835b2b58f0b0f4cf14 Mon Sep 17 00:00:00 2001 From: kodjomiles Date: Sun, 1 Dec 2024 23:52:30 +0000 Subject: [PATCH 2/3] - moved realtime warning info outside tab --- .../code-quality-security/snyk/snyk.md | 39 +++++++------------ 1 file changed, 13 insertions(+), 26 deletions(-) diff --git a/docs/build-your-software-catalog/sync-data-to-catalog/code-quality-security/snyk/snyk.md b/docs/build-your-software-catalog/sync-data-to-catalog/code-quality-security/snyk/snyk.md index e058297e1..2acb602e3 100644 --- a/docs/build-your-software-catalog/sync-data-to-catalog/code-quality-security/snyk/snyk.md +++ b/docs/build-your-software-catalog/sync-data-to-catalog/code-quality-security/snyk/snyk.md @@ -65,7 +65,7 @@ By default, the integration fetches all organizations associated with the provid If neither parameter is provided, the integration will operate with the default behavior of fetching all organizations associated with the supplied Snyk token. ::: - + @@ -232,6 +232,12 @@ This table summarizes the available parameters for the installation. +This workflow/pipeline will run the Snyk integration once and then exit, this is useful for **scheduled** ingestion of data. + +:::warning Real-time updates +If you want the integration to update Port in real time using webhooks you should use the [Real Time & Always On](?installation-methods=real-time-always-on#installation) installation option +::: + By default, the integration fetches all organizations associated with the provided Snyk token. If you wish to customize access, the following parameters are available: `OCEAN__INTEGRATION__CONFIG__ORGANIZATION_ID`: Use this parameter to restrict access to a specific organization. If specified, the integration will fetch data only for the provided organization. @@ -243,12 +249,7 @@ This table summarizes the available parameters for the installation. ::: - -This workflow will run the Snyk integration once and then exit, this is useful for **scheduled** ingestion of data. - -:::warning -If you want the integration to update Port in real time using webhooks you should use the [Real Time & Always On](?installation-methods=real-time-always-on#installation) installation option -::: + Make sure to configure the following [Github Secrets](https://docs.github.com/en/actions/security-guides/using-secrets-in-github-actions): @@ -294,16 +295,12 @@ jobs: ``` - -This pipeline will run the Snyk integration once and then exit, this is useful for **scheduled** ingestion of data. + :::tip Your Jenkins agent should be able to run docker commands. ::: -:::warning -If you want the integration to update Port in real time using webhooks you should use -the [Real Time & Always On](?installation-methods=real-time-always-on#installation) installation option. -::: + Make sure to configure the following [Jenkins Credentials](https://www.jenkins.io/doc/book/using/using-credentials/) of `Secret Text` type: @@ -364,17 +361,12 @@ pipeline { ``` - - -This pipeline will run the Snyk integration once and then exit, this is useful for **scheduled** ingestion of data. + :::tip Your Azure Devops agent should be able to run docker commands. ::: -:::warning -If you want the integration to update Port in real time using webhooks you should use -the [Real Time & Always On](?installation-methods=real-time-always-on#installation) installation option. -::: + Make sure to configure the following variables using [Azure Devops variable groups](https://learn.microsoft.com/en-us/azure/devops/pipelines/library/variable-groups?view=azure-devops&tabs=yaml). Add them into in a variable group named `port-ocean-credentials`: @@ -431,12 +423,7 @@ steps: ``` - -This pipeline will run the Synk integration once and then exit, this is useful for **scheduled** ingestion of data. - -:::warning Realtime updates in Port -If you want the integration to update Port in real time using webhooks you should use the [Real Time & Always On](?installation-methods=real-time-always-on#installation) installation option. -::: + Make sure to [configure the following GitLab variables](https://docs.gitlab.com/ee/ci/variables/#for-a-project): From 80e8cecf794fbce8697942f06e24addf3ea59a4e Mon Sep 17 00:00:00 2001 From: kodjomiles Date: Mon, 2 Dec 2024 18:26:01 +0000 Subject: [PATCH 3/3] - removed default behavior admonition --- .../code-quality-security/snyk/snyk.md | 55 +++++++++---------- 1 file changed, 26 insertions(+), 29 deletions(-) diff --git a/docs/build-your-software-catalog/sync-data-to-catalog/code-quality-security/snyk/snyk.md b/docs/build-your-software-catalog/sync-data-to-catalog/code-quality-security/snyk/snyk.md index 2acb602e3..39b420142 100644 --- a/docs/build-your-software-catalog/sync-data-to-catalog/code-quality-security/snyk/snyk.md +++ b/docs/build-your-software-catalog/sync-data-to-catalog/code-quality-security/snyk/snyk.md @@ -238,33 +238,30 @@ This workflow/pipeline will run the Snyk integration once and then exit, this is If you want the integration to update Port in real time using webhooks you should use the [Real Time & Always On](?installation-methods=real-time-always-on#installation) installation option ::: - By default, the integration fetches all organizations associated with the provided Snyk token. If you wish to customize access, the following parameters are available: + By default, the integration fetches **all organizations** associated with the provided Snyk token. + If you wish to customize access, the following parameters are available: `OCEAN__INTEGRATION__CONFIG__ORGANIZATION_ID`: Use this parameter to restrict access to a specific organization. If specified, the integration will fetch data only for the provided organization. `OCEAN__INTEGRATION__CONFIG__GROUPS`: When you want to limit access to all organizations within specific Snyk groups, use this parameter. Provide a comma-separated list of Snyk group IDs, and the integration will filter data accordingly. - :::note Default behaviour - If neither parameter is provided, the integration will operate with the default behavior of fetching all organizations associated with the supplied Snyk token. - ::: - Make sure to configure the following [Github Secrets](https://docs.github.com/en/actions/security-guides/using-secrets-in-github-actions): -| Parameter | Description | Required | -| --------------------------------------------- | ------------------------------------------------------------------------------------------------------------------ | -------- | -| `OCEAN__INTEGRATION__CONFIG__TOKEN` | The Snyk API token | ✅ | -| `OCEAN__INTEGRATION__CONFIG__ORGANIZATION_ID` | The Snyk organization ID. Provide this parameter to limit access to a specific organization. | ❌ | -| `OCEAN__INTEGRATION__CONFIG__GROUPS` | A comma-separated list of Snyk group ids to filter data for. Provide this parameter to limit access to all organizations within specific group(s) | ❌ | -| `OCEAN__INTEGRATION__CONFIG__API_URL` | The Snyk API URL. If not specified, the default will be https://api.snyk.io | ❌ | -| `OCEAN__INITIALIZE_PORT_RESOURCES` | Default true, When set to false the integration will not create default blueprints and the port App config Mapping | ❌ | -| `OCEAN__SEND_RAW_DATA_EXAMPLES` | Enable sending raw data examples from the third party API to port for testing and managing the integration mapping. Default is true | ❌ | -| `OCEAN__INTEGRATION__IDENTIFIER` | Change the identifier to describe your integration, if not set will use the default one | ❌ | -| `OCEAN__PORT__CLIENT_ID` | Your port client id | ✅ | -| `OCEAN__PORT__CLIENT_SECRET` | Your port client secret | ✅ | -| `OCEAN__PORT__BASE_URL` | Your Port API URL - `https://api.getport.io` for EU, `https://api.us.getport.io` for US | ✅ | +| Parameter | Description | Required | +|-----------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------|----------| +| `OCEAN__INTEGRATION__CONFIG__TOKEN` | The Snyk API token | ✅ | +| `OCEAN__INTEGRATION__CONFIG__ORGANIZATION_ID` | The Snyk organization ID. Provide this parameter to limit access to a specific organization. | ❌ | +| `OCEAN__INTEGRATION__CONFIG__GROUPS` | A comma-separated list of Snyk group ids to filter data for. Provide this parameter to limit access to all organizations within specific group(s) | ❌ | +| `OCEAN__INTEGRATION__CONFIG__API_URL` | The Snyk API URL. If not specified, the default will be https://api.snyk.io | ❌ | +| `OCEAN__INITIALIZE_PORT_RESOURCES` | Default true, When set to false the integration will not create default blueprints and the port App config Mapping | ❌ | +| `OCEAN__SEND_RAW_DATA_EXAMPLES` | Enable sending raw data examples from the third party API to port for testing and managing the integration mapping. Default is true | ❌ | +| `OCEAN__INTEGRATION__IDENTIFIER` | Change the identifier to describe your integration, if not set will use the default one | ❌ | +| `OCEAN__PORT__CLIENT_ID` | Your port client id | ✅ | +| `OCEAN__PORT__CLIENT_SECRET` | Your port client secret | ✅ | +| `OCEAN__PORT__BASE_URL` | Your Port API URL - `https://api.getport.io` for EU, `https://api.us.getport.io` for US | ✅ |
@@ -427,18 +424,18 @@ steps: Make sure to [configure the following GitLab variables](https://docs.gitlab.com/ee/ci/variables/#for-a-project): -| Parameter | Description | Required | -| --------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------- | -| `OCEAN__INTEGRATION__CONFIG__TOKEN` | The Snyk API token | ✅ | -| `OCEAN__INTEGRATION__CONFIG__ORGANIZATION_ID` | The Snyk organization ID. Provide this parameter to limit access to a specific organization | ❌ | -| `OCEAN__INTEGRATION__CONFIG__GROUPS` | A comma-separated list of Snyk group ids to filter data for. Provide this parameter to limit access to all organizations within specific group(s) | ❌ | -| `OCEAN__INTEGRATION__CONFIG__API_URL` | The Snyk API URL. If not specified, the default will be https://api.snyk.io | ❌ | -| `OCEAN__INITIALIZE_PORT_RESOURCES` | Default true, When set to false the integration will not create default blueprints and the port App config Mapping | ❌ | -| `OCEAN__SEND_RAW_DATA_EXAMPLES` | Enable sending raw data examples from the third party API to port for testing and managing the integration mapping. Default is true | ❌ | -| `OCEAN__INTEGRATION__IDENTIFIER` | Change the identifier to describe your integration, if not set will use the default one | ❌ | -| `OCEAN__PORT__CLIENT_ID` | Your port client id ([How to get the credentials](https://docs.getport.io/build-your-software-catalog/custom-integration/api/#find-your-port-credentials)) | ✅ | -| `OCEAN__PORT__CLIENT_SECRET` | Your port client ([How to get the credentials](https://docs.getport.io/build-your-software-catalog/custom-integration/api/#find-your-port-credentials)) secret | ✅ | -| `OCEAN__PORT__BASE_URL` | Your Port API URL - `https://api.getport.io` for EU, `https://api.us.getport.io` for US | ✅ | +| Parameter | Description | Required | +|-----------------------------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------|----------| +| `OCEAN__INTEGRATION__CONFIG__TOKEN` | The Snyk API token | ✅ | +| `OCEAN__INTEGRATION__CONFIG__ORGANIZATION_ID` | The Snyk organization ID. Provide this parameter to limit access to a specific organization | ❌ | +| `OCEAN__INTEGRATION__CONFIG__GROUPS` | A comma-separated list of Snyk group ids to filter data for. Provide this parameter to limit access to all organizations within specific group(s) | ❌ | +| `OCEAN__INTEGRATION__CONFIG__API_URL` | The Snyk API URL. If not specified, the default will be https://api.snyk.io | ❌ | +| `OCEAN__INITIALIZE_PORT_RESOURCES` | Default true, When set to false the integration will not create default blueprints and the port App config Mapping | ❌ | +| `OCEAN__SEND_RAW_DATA_EXAMPLES` | Enable sending raw data examples from the third party API to port for testing and managing the integration mapping. Default is true | ❌ | +| `OCEAN__INTEGRATION__IDENTIFIER` | Change the identifier to describe your integration, if not set will use the default one | ❌ | +| `OCEAN__PORT__CLIENT_ID` | Your port client id ([How to get the credentials](https://docs.getport.io/build-your-software-catalog/custom-integration/api/#find-your-port-credentials)) | ✅ | +| `OCEAN__PORT__CLIENT_SECRET` | Your port client ([How to get the credentials](https://docs.getport.io/build-your-software-catalog/custom-integration/api/#find-your-port-credentials)) secret | ✅ | +| `OCEAN__PORT__BASE_URL` | Your Port API URL - `https://api.getport.io` for EU, `https://api.us.getport.io` for US | ✅ |