Contrast + WebGoat + Docker / Docker Compose

This repo details a few different approaches you can use to add Contrast's Java agent to a Docker container, using WebGoat as a demo application.

The latest 3.x version of the Contrast Java agent is retrieved from Docker Hub at build time via this line. Other available versions can be listed on Docker Hub.

The JAVA_TOOL_OPTIONS variable is used in order to add the -javaagent:contrast.jar file to the JVM startup options, conditionally.

Setup

Copy contrast.env.tmpl to contrast.env and then open it in your text editor.
Fill in the connection details in contrast.env

Running with Docker locally

Run ./docker-build.sh to build the container
Run ./docker-run.sh to run the built container
Answer y/n to the Run with Contrast? [Y/N] prompt

When you answer yes, docker is invoked with the contrast.env file, so Contrast will be loaded.

When you answer no, this environment file is not used and the application runs without Contrast.

Running with Docker Compose

Run ./docker-compose-run.sh
Answer y/n to the Run with Contrast? [Y/N] prompt

When you answer yes, docker-compose is invoked with the contrast.env file, so Contrast will be loaded.