ResearchCloud will soon support component secrets. This will allow us to create a component for the Rapid7 security monitoring agent.
Crucially:
- only use the rapid7 token when provided as a component secret
- only allow the component to be run on UU workspaces
Another issue is how to get the Rapid7 install script on the workspace. Rapid7 requires us to download a .deb (or equivalent) from their website. Maybe this can be automated, or maybe we'll have to park the .deb somewhere, if this is allowed.
ResearchCloud will soon support component secrets. This will allow us to create a component for the Rapid7 security monitoring agent.
Crucially:
Another issue is how to get the Rapid7 install script on the workspace. Rapid7 requires us to download a
.deb(or equivalent) from their website. Maybe this can be automated, or maybe we'll have to park the.debsomewhere, if this is allowed.