diff --git a/.github/workflows/cx.yml b/.github/workflows/cx.yml index b807343..fef8e17 100644 --- a/.github/workflows/cx.yml +++ b/.github/workflows/cx.yml @@ -1,24 +1,26 @@ name: cx + on: pull_request: branches: - master -# push: + types: [closed] + jobs: ast_scan: + if: github.event.pull_request.merged == true runs-on: ubuntu-latest name: Checkmarx scan run + steps: - - name: Run scan - uses: CheckmarxDev/ast-github-action@more_engines - id: scan + - name: Checkout code + uses: actions/checkout@v2 + + - name: Checkmarx AST CLI Action + uses: checkmarx/ast-github-action@main with: - github_repo_token: ${{ secrets.GITHUB_TOKEN }} - ast_uri: ${{ secrets.AST_URI }} - ast_access_key_id: ${{ secrets.AST_ACCESS_KEY_ID }} - ast_access_key_secret: ${{ secrets.AST_ACCESS_KEY_SECRET }} - sca_user: ${{ secrets.SCA_USER }} - sca_password: ${{ secrets.SCA_PASSWORD }} - action_scan_complete_timeout_secs: 600 - high_results_threshold: 0 - medium_results_threshold: 10 + base_uri: https://ast.checkmarx.net/ + cx_tenant: workshop + cx_client_id: ${{ secrets.CX_CLIENT_ID }} + cx_client_secret: ${{ secrets.CX_CLIENT_SECRET }} + additional_params: '' # Specify any additional parameters you need here diff --git a/README.md b/README.md index 80e96b0..f1d50a3 100644 --- a/README.md +++ b/README.md @@ -1,7 +1,3 @@ -![](https://github.com/CheckmarxDev/NodeGoat-test/workflows/cx/badge.svg) - -This is a "Vulnerable" Web Application developed by Cyber Security and Privacy Foundation(www.cysecurity.org). This app is intended for the Java Programmers and other people who wish to learn about Web application vulnerabilities and write secure code.123 - **The full course content is now available on Github for free:** https://github.com/CSPF-Founder/JavaSecurityCourse diff --git a/azure-pipelines.yml b/azure-pipelines.yml new file mode 100644 index 0000000..5691b0c --- /dev/null +++ b/azure-pipelines.yml @@ -0,0 +1,28 @@ +# Starter pipeline +# Start with a minimal pipeline that you can customize to build and deploy your code. +# Add steps that build, run tests, deploy, and more: +# https://aka.ms/yaml + +trigger: +- master + +pool: + vmImage: ubuntu-latest + +steps: +- script: echo Hello, world! + displayName: 'Run a one-line script' + +- script: | + echo Add other tasks to build, test, and deploy your project. + echo See https://aka.ms/yaml + displayName: 'Run a multi-line script' +- task: Application security testing@2021 + inputs: + projectName: 'SC_JVL_ADO' + enableProxy: false + enableSastScan: true + CheckmarxService: 'CxSAST' + fullTeamName: 'ADO' + incScan: false + enableDependencyScan: false \ No newline at end of file diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/AddPage.class b/target/classes/org/cysecurity/cspf/jvl/controller/AddPage.class new file mode 100644 index 0000000..f3bf58e Binary files /dev/null and b/target/classes/org/cysecurity/cspf/jvl/controller/AddPage.class differ diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/Cl.class b/target/classes/org/cysecurity/cspf/jvl/controller/Cl.class new file mode 100644 index 0000000..4f3e173 Binary files /dev/null and b/target/classes/org/cysecurity/cspf/jvl/controller/Cl.class differ diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/DoLogic.class b/target/classes/org/cysecurity/cspf/jvl/controller/DoLogic.class new file mode 100644 index 0000000..cc33f5f Binary files /dev/null and b/target/classes/org/cysecurity/cspf/jvl/controller/DoLogic.class differ diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/EmailCheck.class b/target/classes/org/cysecurity/cspf/jvl/controller/EmailCheck.class new file mode 100644 index 0000000..95e0892 Binary files /dev/null and b/target/classes/org/cysecurity/cspf/jvl/controller/EmailCheck.class differ diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/ForwardMe.class b/target/classes/org/cysecurity/cspf/jvl/controller/ForwardMe.class new file mode 100644 index 0000000..526f76f Binary files /dev/null and b/target/classes/org/cysecurity/cspf/jvl/controller/ForwardMe.class differ diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/Install.class b/target/classes/org/cysecurity/cspf/jvl/controller/Install.class new file mode 100644 index 0000000..93844c2 Binary files /dev/null and b/target/classes/org/cysecurity/cspf/jvl/controller/Install.class differ diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/LoginValidator.class b/target/classes/org/cysecurity/cspf/jvl/controller/LoginValidator.class new file mode 100644 index 0000000..da67740 Binary files /dev/null and b/target/classes/org/cysecurity/cspf/jvl/controller/LoginValidator.class differ diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/Logout.class b/target/classes/org/cysecurity/cspf/jvl/controller/Logout.class new file mode 100644 index 0000000..00d8111 Binary files /dev/null and b/target/classes/org/cysecurity/cspf/jvl/controller/Logout.class differ diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/MyHandler.class b/target/classes/org/cysecurity/cspf/jvl/controller/MyHandler.class new file mode 100644 index 0000000..11a471e Binary files /dev/null and b/target/classes/org/cysecurity/cspf/jvl/controller/MyHandler.class differ diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/Open.class b/target/classes/org/cysecurity/cspf/jvl/controller/Open.class new file mode 100644 index 0000000..77bbd5c Binary files /dev/null and b/target/classes/org/cysecurity/cspf/jvl/controller/Open.class differ diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/Register.class b/target/classes/org/cysecurity/cspf/jvl/controller/Register.class new file mode 100644 index 0000000..5b58fbf Binary files /dev/null and b/target/classes/org/cysecurity/cspf/jvl/controller/Register.class differ diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/SendMessage.class b/target/classes/org/cysecurity/cspf/jvl/controller/SendMessage.class new file mode 100644 index 0000000..ba69c08 Binary files /dev/null and b/target/classes/org/cysecurity/cspf/jvl/controller/SendMessage.class differ diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/UploadObject.class b/target/classes/org/cysecurity/cspf/jvl/controller/UploadObject.class new file mode 100644 index 0000000..b07f4b7 Binary files /dev/null and b/target/classes/org/cysecurity/cspf/jvl/controller/UploadObject.class differ diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/UsernameCheck.class b/target/classes/org/cysecurity/cspf/jvl/controller/UsernameCheck.class new file mode 100644 index 0000000..3d74884 Binary files /dev/null and b/target/classes/org/cysecurity/cspf/jvl/controller/UsernameCheck.class differ diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/XPathQuery.class b/target/classes/org/cysecurity/cspf/jvl/controller/XPathQuery.class new file mode 100644 index 0000000..25c7d50 Binary files /dev/null and b/target/classes/org/cysecurity/cspf/jvl/controller/XPathQuery.class differ diff --git a/target/classes/org/cysecurity/cspf/jvl/controller/xxe.class b/target/classes/org/cysecurity/cspf/jvl/controller/xxe.class new file mode 100644 index 0000000..f2b544f Binary files /dev/null and b/target/classes/org/cysecurity/cspf/jvl/controller/xxe.class differ diff --git a/target/classes/org/cysecurity/cspf/jvl/model/DBConnect.class b/target/classes/org/cysecurity/cspf/jvl/model/DBConnect.class new file mode 100644 index 0000000..eaaffd3 Binary files /dev/null and b/target/classes/org/cysecurity/cspf/jvl/model/DBConnect.class differ diff --git a/target/classes/org/cysecurity/cspf/jvl/model/HashMe.class b/target/classes/org/cysecurity/cspf/jvl/model/HashMe.class new file mode 100644 index 0000000..4e3dadd Binary files /dev/null and b/target/classes/org/cysecurity/cspf/jvl/model/HashMe.class differ diff --git a/target/classes/org/cysecurity/cspf/jvl/model/orm/Users.class b/target/classes/org/cysecurity/cspf/jvl/model/orm/Users.class new file mode 100644 index 0000000..69d9a02 Binary files /dev/null and b/target/classes/org/cysecurity/cspf/jvl/model/orm/Users.class differ diff --git a/testtest.txt b/testtest.txt new file mode 100644 index 0000000..bc3f9c8 --- /dev/null +++ b/testtest.txt @@ -0,0 +1,3 @@ +#test +#test +#test