Merge pull request #370 from secureCodeBox/dependencies/update-wpscan… · avicoder/secureCodeBox@863d8a9 · GitHub

avicoder / secureCodeBox Public

forked from secureCodeBox/secureCodeBox

• Notifications You must be signed in to change notification settings
• Fork 0
• Star 0

• Code
• Pull requests 1
• Actions
• Projects
• Security and quality
• Insights

Additional navigation options

Commit 863d8a9

Browse filesBrowse the repository at this point in the historyBrowse files

J12934

authored

Merge pull request secureCodeBox#370 from secureCodeBox/dependencies/update-wpscan-to-3.8.17

Upgraded WPScan Scanner to newest version 3.8.17 and added End-2-End test

2 parents 5eb2f2f + 6b03a00 commit 863d8a9
Copy full SHA for 863d8a9

6 files changed

+33-5Lines changed: 33 additions & 5 deletions

File tree

Expand file treeCollapse file tree

Open diff view settings

Filter options

• .github/workflows
  • ci.yaml
• scanners/wpscan
  • Chart.yaml
  • README.md
  • helm2.Chart.yaml
  • values.yaml
• tests/integration/scanner
  • wpscan.test.js

Expand file treeCollapse file tree

Open diff view settings

Collapse file

‎.github/workflows/ci.yaml‎

Copy file name to clipboardExpand all lines: .github/workflows/ci.yaml

+14Lines changed: 14 additions & 0 deletions

Original file line number	Diff line number	Diff line change
@@ -652,6 +652,8 @@ jobs:
652	652	helm -n demo-apps install unsafe-https ./demo-apps/unsafe-https/ --wait
653	653	# Install bodgeit app
654	654	helm -n demo-apps install bodgeit ./demo-apps/bodgeit/ --wait
	655	+ # Install old-wordpress app
	656	+ helm -n demo-apps install old-wordpress ./demo-apps/old-wordpress/ --wait
655	657	# Install plain nginx server
656	658	kubectl create deployment --image nginx:alpine nginx --namespace demo-apps
657	659	kubectl expose deployment nginx --port 80 --namespace demo-apps
@@ -769,6 +771,18 @@ jobs:
769	771	cd tests/integration/
770	772	npx jest --ci --color scanner/sslyze.test.js
771	773
	774	+ # ---- WPScan Integration Tests ----
	775	+
	776	+ - name: "WPScan Integration Tests"
	777	+ run: |
	778	+ kubectl -n integration-tests delete scans --all
	779	+ helm -n integration-tests install wpscan ./scanners/wpscan/ \
	780	+ --set="parserImage.repository=docker.io/${{ env.DOCKER_NAMESPACE }}/parser-wpscan" \
	781	+ --set="parserImage.tag=sha-$(git rev-parse --short HEAD)"
	782	+ cd tests/integration/
	783	+ npx jest --ci --color scanner/wpscan.test.js
	784	+
	785	+
772	786	# ---- Zap Integration Tests ----
773	787
774	788	- name: "zap Integration Tests"

Collapse file

‎scanners/wpscan/Chart.yaml‎

Copy file name to clipboardExpand all lines: scanners/wpscan/Chart.yaml

+1-1Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
@@ -5,7 +5,7 @@ description: A Helm chart for the WordPress security scanner that integrates wit
5	5	type: application
6	6	# version - gets automatically set to the secureCodeBox release version when the helm charts gets published
7	7	version: v2.7.0-alpha1
8		- appVersion: latest
	8	+ appVersion: 3.8.17
9	9	kubeVersion: ">=v1.11.0-0"
10	10
11	11	keywords:

Collapse file

‎scanners/wpscan/README.md‎

Copy file name to clipboardExpand all lines: scanners/wpscan/README.md

+1-1Lines changed: 1 addition & 1 deletion

• Display the source diff
• Display the rich diff

Original file line number	Diff line number	Diff line change
@@ -73,7 +73,7 @@ Incompatible choices (only one of each group/s can be used):
73	73	| Key | Type | Default | Description |
74	74	|-----|------|---------|-------------|
75	75	| image.repository | string | `"wpscanteam/wpscan"` | Container Image to run the scan |
76		- | image.tag | string | defaults to latest because WPscan didn't offer tagged image versions | defaults to the charts appVersion |
	76	+ | image.tag | string | `nil` | defaults to the charts appVersion |
77	77	| parseJob.ttlSecondsAfterFinished | string | `nil` | seconds after which the kubernetes job for the parser will be deleted. Requires the Kubernetes TTLAfterFinished controller: https://kubernetes.io/docs/concepts/workloads/controllers/ttlafterfinished/ |
78	78	| parserImage.repository | string | `"docker.io/securecodebox/parser-wpscan"` | Parser image repository |
79	79	| parserImage.tag | string | defaults to the charts version | Parser image tag |

Collapse file

‎scanners/wpscan/helm2.Chart.yaml‎

Copy file name to clipboardExpand all lines: scanners/wpscan/helm2.Chart.yaml

+1-1Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
@@ -5,7 +5,7 @@ description: A Helm chart for the WordPress security scanner that integrates wit
5	5	type: application
6	6	# version - gets automatically set to the secureCodeBox release version when the helm charts gets published
7	7	version: v2.7.0-alpha1
8		- appVersion: v3.8.15
	8	+ appVersion: 3.8.17
9	9	kubeVersion: ">=v1.11.0-0"
10	10
11	11	keywords:

Collapse file

‎scanners/wpscan/values.yaml‎

Copy file name to clipboardExpand all lines: scanners/wpscan/values.yaml

+1-2Lines changed: 1 addition & 2 deletions

Original file line number	Diff line number	Diff line change
@@ -2,8 +2,7 @@ image:
2	2	# image.repository -- Container Image to run the scan
3	3	repository: wpscanteam/wpscan
4	4	# image.tag -- defaults to the charts appVersion
5		- # @default -- defaults to latest because WPscan didn't offer tagged image versions
6		- tag: latest
	5	+ tag: null
7	6
8	7	parserImage:
9	8	# parserImage.repository -- Parser image repository

Collapse file

‎tests/integration/scanner/wpscan.test.js‎

Copy file name to clipboard

+15Lines changed: 15 additions & 0 deletions

Original file line number	Diff line number	Diff line change
@@ -0,0 +1,15 @@
	1	+ const {scan} = require('../helpers');
	2	+
	3	+ test(
	4	+ 'WPScan should find at least 1 finding regarding the old-wordpress demo app',
	5	+ async () => {
	6	+ const {count} = await scan(
	7	+ 'wpscan-scanner-dummy-scan',
	8	+ 'wpscan',
	9	+ ['--url', 'old-wordpress.demo-apps.svc'],
	10	+ 90
	11	+ );
	12	+ expect(count).toBeGreaterThanOrEqual(1);
	13	+ },
	14	+ 3 * 60 * 1000
	15	+ );

0 commit comments

Comments

0 (0)