Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/zupit/horusec-examples-vulnerabilities
Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.
https://github.com/zupit/horusec-examples-vulnerabilities
analysis cd ci cli golang hacktoberfest java kotlin netcore python ruby sast sast-analysis scanner security security-development security-flaws static-analysis terraform vulnerabilities
Last synced: 2 months ago
JSON representation
Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.
- Host: GitHub
- URL: https://github.com/zupit/horusec-examples-vulnerabilities
- Owner: ZupIT
- License: apache-2.0
- Created: 2021-08-26T13:56:58.000Z (over 3 years ago)
- Default Branch: main
- Last Pushed: 2023-04-04T21:20:44.000Z (almost 2 years ago)
- Last Synced: 2023-04-10T05:12:27.695Z (almost 2 years ago)
- Topics: analysis, cd, ci, cli, golang, hacktoberfest, java, kotlin, netcore, python, ruby, sast, sast-analysis, scanner, security, security-development, security-flaws, static-analysis, terraform, vulnerabilities
- Language: Elixir
- Homepage: https://horusec.io/
- Size: 1.53 MB
- Stars: 8
- Watchers: 4
- Forks: 14
- Open Issues: 23
-
Metadata Files:
- Readme: README.md
- License: LICENSE
- Codeowners: .github/CODEOWNERS
Awesome Lists containing this project
README
# **Horusec Examples Vulnerabilities**
## **Table of contents**
### 1. [**About**](#about)
### 2. [**Documentation**](#documentation)
### 3. [**Contributing**](#contributing)
### 4. [**License**](#license)
### 5. [**Community**](#community)
## **About**
This repository contains some vulnerabilities examples for you to test Horusec's analysis.
## **Documentation**
For more information about Horusec, please check out the [**documentation**](https://docs.horusec.io).
## **Contributing**
If you want to contribute to this repository, access our [**Contributing Guide**](https://github.com/ZupIT/horusec/blob/main/CONTRIBUTING.md).
### **Developer Certificate of Origin - DCO**
This is a security layer for the project and for the developers. It is mandatory.
Follow one of these two methods to add DCO to your commits:
**1. Command line**
Follow the steps:
**Step 1:** Configure your local git environment adding the same name and e-mail configured at your GitHub account. It helps to sign commits manually during reviews and suggestions.
```
git config --global user.name “Name”
git config --global user.email “[email protected]”
```
**Step 2:** Add the Signed-off-by line with the `'-s'` flag in the git commit command:
```
$ git commit -s -m "This is my commit message"
```
**2. GitHub website**
You can also manually sign your commits during GitHub reviews and suggestions, follow the steps below:
**Step 1:** When the commit changes box opens, manually type or paste your signature in the comment box, see the example:
```
Signed-off-by: Name < e-mail address >
```
For this method, your name and e-mail must be the same registered on your GitHub account.
## **License**
[**Apache License 2.0**](https://github.com/ZupIT/horusec-examples-vulnerabilities/blob/main/LICENSE).
## **Community**
Do you have any question about Horusec? Let's chat in our [**forum**](https://forum.zup.com.br/).
This project exists thanks to all the contributors. You rock! ❤️🚀