Commit d486f52
File tree
- .github/workflows
- scanners/zap-extended
- cascading-rules
- templates
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -649,15 +649,15 @@ jobs: | |||
| 649 | 649 | - name: "Install Demo Apps" | |
| 650 | 650 | run: | | |
| 651 | 651 | # Install dummy-ssh app | |
| 652 | - helm -n demo-apps install dummy-ssh ./demo-apps/dummy-ssh/ --wait | ||
| 652 | + helm -n demo-apps install dummy-ssh ./demo-apps/dummy-ssh/ --set="fullnameOverride=dummy-ssh" --wait | ||
| 653 | 653 | # Install unsafe-https app | |
| 654 | - helm -n demo-apps install unsafe-https ./demo-apps/unsafe-https/ --wait | ||
| 654 | + helm -n demo-apps install unsafe-https ./demo-apps/unsafe-https/ --set="fullnameOverride=unsafe-https" --wait | ||
| 655 | 655 | # Install bodgeit app | |
| 656 | - helm -n demo-apps install bodgeit ./demo-apps/bodgeit/ --wait | ||
| 656 | + helm -n demo-apps install bodgeit ./demo-apps/bodgeit/ --set="fullnameOverride=bodgeit" --wait | ||
| 657 | 657 | # Install old-wordpress app | |
| 658 | - helm -n demo-apps install old-wordpress ./demo-apps/old-wordpress/ --wait | ||
| 658 | + helm -n demo-apps install old-wordpress ./demo-apps/old-wordpress/ --set="fullnameOverride=old-wordpress" --wait | ||
| 659 | 659 | # Install juiceshop app | |
| 660 | - helm -n demo-apps install juiceshop ./demo-apps/juice-shop/ --wait | ||
| 660 | + helm -n demo-apps install juiceshop ./demo-apps/juice-shop/ --set="fullnameOverride=juiceshop" --wait | ||
| 661 | 661 | # Install plain nginx server | |
| 662 | 662 | kubectl create deployment --image nginx:alpine nginx --namespace demo-apps | |
| 663 | 663 | kubectl expose deployment nginx --port 80 --namespace demo-apps | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -0,0 +1,21 @@ | |||
| 1 | + apiVersion: "cascading.securecodebox.io/v1" | ||
| 2 | + kind: CascadingRule | ||
| 3 | + metadata: | ||
| 4 | + name: "zap-extended-http" | ||
| 5 | + labels: | ||
| 6 | + securecodebox.io/invasive: non-invasive | ||
| 7 | + securecodebox.io/intensive: medium | ||
| 8 | + spec: | ||
| 9 | + matches: | ||
| 10 | + anyOf: | ||
| 11 | + - category: "Open Port" | ||
| 12 | + attributes: | ||
| 13 | + service: http | ||
| 14 | + state: open | ||
| 15 | + - category: "Open Port" | ||
| 16 | + attributes: | ||
| 17 | + service: https | ||
| 18 | + state: open | ||
| 19 | + scanSpec: | ||
| 20 | + scanType: "zap-extended-scan" | ||
| 21 | + parameters: ["-t", "{{attributes.service}}://{{$.hostOrIP}}"] | ||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -0,0 +1,8 @@ | |||
| 1 | + # The CascadingRules are not directly in the /templates directory as their curly bracket syntax clashes with helms templates ... :( | ||
| 2 | + # We import them as raw files to avoid these clashes as escaping them is even more messy | ||
| 3 | + {{ range $path, $_ := .Files.Glob "cascading-rules/*" }} | ||
| 4 | + # Include File | ||
| 5 | + {{ $.Files.Get $path }} | ||
| 6 | + # Separate multiple files | ||
| 7 | + --- | ||
| 8 | + {{ end }} | ||
Lines changed: 8 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -0,0 +1,8 @@ | |||
| 1 | + apiVersion: "execution.securecodebox.io/v1" | ||
| 2 | + kind: ParseDefinition | ||
| 3 | + metadata: | ||
| 4 | + name: "zap-extended-xml" | ||
| 5 | + spec: | ||
| 6 | + handlesResultsType: zap-xml | ||
| 7 | + image: "{{ .Values.parserImage.repository }}:{{ .Values.parserImage.tag | default .Chart.Version }}" | ||
| 8 | + ttlSecondsAfterFinished: {{ .Values.parseJob.ttlSecondsAfterFinished }} | ||
0 commit comments