diff --git a/.github/workflows/devsecops.yml b/.github/workflows/devsecops.yml index 0b52994..c0d501c 100644 --- a/.github/workflows/devsecops.yml +++ b/.github/workflows/devsecops.yml @@ -2,7 +2,7 @@ name: DevSecOps Pipeline on: push: - branches: [main, develop] + branches: [main, develop, demo-vuln] pull_request: branches: [main] diff --git a/quess_front/Dockerfile b/quess_front/Dockerfile index 9a090e3..5ce4432 100644 --- a/quess_front/Dockerfile +++ b/quess_front/Dockerfile @@ -14,9 +14,7 @@ COPY . . RUN npm run build # Stage 2: Serve with nginx -FROM nginx:alpine - -RUN apk upgrade --no-cache +FROM nginx:1.16 COPY --from=builder /app/build /usr/share/nginx/html diff --git a/quess_front/package-lock.json b/quess_front/package-lock.json index 8f8f027..94262c2 100644 --- a/quess_front/package-lock.json +++ b/quess_front/package-lock.json @@ -36,6 +36,7 @@ "dotenv": "^16.4.5", "formik": "^2.4.5", "mui-tiptap": "^1.8.7", + "node-forge": "^0.9.0", "react": "^18.2.0", "react-dom": "^18.2.0", "react-draggable": "^4.4.6", @@ -2567,6 +2568,12 @@ "react-dom": "^16.8.0 || ^17 || ^18" } }, + "node_modules/@hookform/devtools/node_modules/lodash": { + "version": "4.18.1", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz", + "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==", + "dev": true + }, "node_modules/@humanwhocodes/config-array": { "version": "0.13.0", "resolved": "https://registry.npmjs.org/@humanwhocodes/config-array/-/config-array-0.13.0.tgz", @@ -8167,6 +8174,11 @@ "eslint": "^8.1.0" } }, + "node_modules/eslint-plugin-flowtype/node_modules/lodash": { + "version": "4.18.1", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz", + "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==" + }, "node_modules/eslint-plugin-import": { "version": "2.32.0", "resolved": "https://registry.npmjs.org/eslint-plugin-import/-/eslint-plugin-import-2.32.0.tgz", @@ -9163,6 +9175,11 @@ "node": ">=0.10.0" } }, + "node_modules/formik/node_modules/lodash": { + "version": "4.18.1", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz", + "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==" + }, "node_modules/forwarded": { "version": "0.2.0", "resolved": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz", @@ -9756,6 +9773,11 @@ } } }, + "node_modules/html-webpack-plugin/node_modules/lodash": { + "version": "4.18.1", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz", + "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==" + }, "node_modules/htmlparser2": { "version": "6.1.0", "resolved": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-6.1.0.tgz", @@ -11797,9 +11819,9 @@ } }, "node_modules/lodash": { - "version": "4.18.1", - "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz", - "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==" + "version": "4.17.20", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.20.tgz", + "integrity": "sha512-PlhdFcillOINfeV7Ni6oF1TAEayyZBoZ8bcshTHqOYJYlrqzRK5hagpagky5o4HfCzzd1TRkXPMFq6cKk9rGmA==" }, "node_modules/lodash-es": { "version": "4.18.1", @@ -12147,6 +12169,11 @@ "react-dom": "^16.8.0 || ^17.0.2 || ^18.0.0" } }, + "node_modules/mui-tiptap/node_modules/lodash": { + "version": "4.18.1", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz", + "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==" + }, "node_modules/mui-tiptap/node_modules/type-fest": { "version": "3.13.1", "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-3.13.1.tgz", @@ -12255,11 +12282,11 @@ } }, "node_modules/node-forge": { - "version": "1.4.0", - "resolved": "https://registry.npmjs.org/node-forge/-/node-forge-1.4.0.tgz", - "integrity": "sha512-LarFH0+6VfriEhqMMcLX2F7SwSXeWwnEAJEsYm5QKWchiVYVvJyV9v7UDvUv+w5HO23ZpQTXDv/GxdDdMyOuoQ==", + "version": "0.9.0", + "resolved": "https://registry.npmjs.org/node-forge/-/node-forge-0.9.0.tgz", + "integrity": "sha512-7ASaDa3pD+lJ3WvXFsxekJQelBKRpne+GOVbLbtHYdd7pFspyeuJHnWfLplGf3SwKGbfs/aYl5V/JCIaHVUKKQ==", "engines": { - "node": ">= 6.13.0" + "node": ">= 4.5.0" } }, "node_modules/node-int64": { @@ -15030,6 +15057,11 @@ "strip-ansi": "^6.0.1" } }, + "node_modules/renderkid/node_modules/lodash": { + "version": "4.18.1", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz", + "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==" + }, "node_modules/require-directory": { "version": "2.1.1", "resolved": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz", @@ -15482,6 +15514,14 @@ "node": ">=10" } }, + "node_modules/selfsigned/node_modules/node-forge": { + "version": "1.4.0", + "resolved": "https://registry.npmjs.org/node-forge/-/node-forge-1.4.0.tgz", + "integrity": "sha512-LarFH0+6VfriEhqMMcLX2F7SwSXeWwnEAJEsYm5QKWchiVYVvJyV9v7UDvUv+w5HO23ZpQTXDv/GxdDdMyOuoQ==", + "engines": { + "node": ">= 6.13.0" + } + }, "node_modules/semver": { "version": "7.7.4", "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.4.tgz", diff --git a/quess_front/package.json b/quess_front/package.json index 9e4d1a1..fb7f4b1 100644 --- a/quess_front/package.json +++ b/quess_front/package.json @@ -31,6 +31,7 @@ "dotenv": "^16.4.5", "formik": "^2.4.5", "mui-tiptap": "^1.8.7", + "node-forge": "^0.9.0", "react": "^18.2.0", "react-dom": "^18.2.0", "react-draggable": "^4.4.6",