https://github.com/contrast-security-oss/nodetestbenches
A collection of intentionally vulnerable test bench applications for testing the Contrast Security Node Agent.
https://github.com/contrast-security-oss/nodetestbenches
Last synced: 9 months ago
JSON representation
A collection of intentionally vulnerable test bench applications for testing the Contrast Security Node Agent.
- Host: GitHub
- URL: https://github.com/contrast-security-oss/nodetestbenches
- Owner: Contrast-Security-OSS
- Created: 2020-03-10T16:46:53.000Z (over 6 years ago)
- Default Branch: main
- Last Pushed: 2024-10-31T16:11:37.000Z (over 1 year ago)
- Last Synced: 2025-01-19T21:38:00.600Z (over 1 year ago)
- Language: JavaScript
- Size: 47.1 MB
- Stars: 9
- Watchers: 11
- Forks: 6
- Open Issues: 8
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Node Agent Test Benches
This repository contains our library of test bench applications for testing the
Contrast Security Node agent with various supported frameworks.
Vulnerabilities are implemented in a shared module, `test-bench-utils`, which is
then installed and used by each application.
## Using [`lerna`](https://lerna.js.org)
`lerna` is a tool for managing multiple packages within a single repository. We
use lerna to handle the installation and version management of
`test-bench-utils` during development.
By default, when running `npm install` in the root of this repo,
`lerna bootstrap` will also be executed. This will install dependencies within
each of the specified package directories, as well as `npm link` shared
dependencies.
When bumping a package version, we will use `lerna publish ` instead of
`npm version` inside _test-bench-utils_. This will keep versions in sync between
packages.
Outside of these two commands, development on each application or the
`test-bench-utils` package itself should remain unchanged for the most part.
## Adding new sample app to lerna
* Add folder name in `lerna.json` and re-run `lerna bootstrap`
* Add the app(folder name) to `jobs.build-and-push.strategy.matrix.apps` .github/workflows/build.yml
* Add repository into ecr `aws ecr create-repository --repository-name `