# Copy this file to .env and fill in the values.
# .env is gitignored — never commit real credentials.

# ── Container engine (docker | podman) ──
CONTAINER_ENGINE=docker

# ── Docker Registry ──
REGISTRY=kcr.kollect.biz
REGISTRY_USER=robot$kollect-tools+ci-builder
REGISTRY_PASS=harbor-robot-password
IMAGE_TAG=latest

# ── OWASP Dependency-Check ──
# Get an API key at https://nvd.nist.gov/developers/request-an-api-key
# Optional but strongly recommended — without it NVD rate-limits to 5 req / 30s.
NVD_API_KEY=<nvd-api-key>