https://github.com/equinor/appsec-snyk-onboarding
Slides related to the onboarding of using Snyk.
https://github.com/equinor/appsec-snyk-onboarding
documentation
Last synced: 5 months ago
JSON representation
Slides related to the onboarding of using Snyk.
- Host: GitHub
- URL: https://github.com/equinor/appsec-snyk-onboarding
- Owner: equinor
- License: mit
- Archived: true
- Created: 2022-04-19T09:57:08.000Z (about 4 years ago)
- Default Branch: main
- Last Pushed: 2025-05-07T09:58:25.000Z (about 1 year ago)
- Last Synced: 2025-07-04T03:01:58.404Z (12 months ago)
- Topics: documentation
- Language: CSS
- Homepage: https://snykonboarding.app.radix.equinor.com/
- Size: 229 KB
- Stars: 2
- Watchers: 5
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
- Security: SECURITY.md
Awesome Lists containing this project
README
# Open Source vulnerability scanning with Snyk
Archiving repo. It's not updated and it is not being used. Our guidelines on appsec.equinor.com is the got source for information as well as the #appsec community on Slack.
> Onboard your DevOps team on using Snyk.
Training material for basic introduction to use Snyk for scanning open source libraries and it's dependencies for vulnerabilities.
The slides are created with [Reveal.js](https://revealjs.com/), and automatically deployed to [Omnia Radix](https://snykonboarding.app.radix.equinor.com) on new commits to the `main` branch.
## Updating content
The contents of the onboarding slides are contained in a set of markdown file in the [`content`](content) folder. The markdown files are referenced from the [`index.html`](index.html) file.
## Development environment
### Live Server
- To host the files, use the "Live Server" plugin to VSCode. (It's included in recommend extensions the workspace)
- Press to "Go Live" icon toolbar bottom right, and the port 5500 is forwarded to your client.
### Docker container
- `docker build -t "ossnyk" .`
- `docker run -d --name ossnyk_web -p 8080:8080 ossnyk`
- User your browser to visit localhost:8080 (if builded locally) - or open the Ports tab in in codespaces, and visit your private link.
### SRI - Integrity check for own provided source files
How to provide a hash for the .js and .css file provided in the source.
- `cat ./content/js/app.js | openssl dgst -sha512 -binary | openssl base64 -A`
- `cat ./content/css/equinor.css | openssl dgst -sha512 -binary | openssl base64 -A`
# Generate or update QR link to site
The QR code for easily getting the link to the site should be updated if its URL changes
```
cd scripts/
python -m venv env
source env/bin/activate
pip install -r requirements.txt
bash generate_qr.sh
```