From 276eeaf43e7a681e60d012b75c40cb21b3447385 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Mon, 27 Apr 2020 11:26:21 -0400 Subject: [PATCH 01/44] Update HelloWorld.java --- src/main/java/com/appsecco/example/HelloWorld.java | 1 + 1 file changed, 1 insertion(+) diff --git a/src/main/java/com/appsecco/example/HelloWorld.java b/src/main/java/com/appsecco/example/HelloWorld.java index ac7104bd..9fd0ee37 100644 --- a/src/main/java/com/appsecco/example/HelloWorld.java +++ b/src/main/java/com/appsecco/example/HelloWorld.java @@ -28,6 +28,7 @@ public class HelloWorld extends ExampleSupport { public String execute() throws Exception { setMessage(getText(MESSAGE)); + // Some change return SUCCESS; } From bb21754ac7258519d1e54e433c6f6adcb7fa75c3 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Mon, 27 Apr 2020 11:30:56 -0400 Subject: [PATCH 02/44] Update ExampleSupport.java --- src/main/java/com/appsecco/example/ExampleSupport.java | 1 + 1 file changed, 1 insertion(+) diff --git a/src/main/java/com/appsecco/example/ExampleSupport.java b/src/main/java/com/appsecco/example/ExampleSupport.java index 25da0d6f..7a935319 100644 --- a/src/main/java/com/appsecco/example/ExampleSupport.java +++ b/src/main/java/com/appsecco/example/ExampleSupport.java @@ -27,4 +27,5 @@ * Base Action class for the Tutorial package. */ public class ExampleSupport extends ActionSupport { + int a = 2; } From 005d4c7e58738112b84098e49363ac24afc75e28 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Mon, 27 Apr 2020 11:46:59 -0400 Subject: [PATCH 03/44] Update Constant.java --- src/main/java/com/appsecco/dvja/Constant.java | 1 + 1 file changed, 1 insertion(+) diff --git a/src/main/java/com/appsecco/dvja/Constant.java b/src/main/java/com/appsecco/dvja/Constant.java index 726efe0c..2bbf8250 100644 --- a/src/main/java/com/appsecco/dvja/Constant.java +++ b/src/main/java/com/appsecco/dvja/Constant.java @@ -2,4 +2,5 @@ public class Constant { public static String SESSION_USER_HANDLE = "USER"; + int a = 2; } From d246d222195d2e3587ac1a1271490753b494d6aa Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Mon, 27 Apr 2020 11:48:44 -0400 Subject: [PATCH 04/44] Update Login.java --- src/main/java/com/appsecco/example/Login.java | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/main/java/com/appsecco/example/Login.java b/src/main/java/com/appsecco/example/Login.java index b231919a..2d0f9a4f 100644 --- a/src/main/java/com/appsecco/example/Login.java +++ b/src/main/java/com/appsecco/example/Login.java @@ -29,6 +29,7 @@ public String execute() throws Exception { if (isInvalid(getPassword())) return INPUT; + if (true) return ""; return SUCCESS; } @@ -56,4 +57,4 @@ public void setPassword(String password) { this.password = password; } -} \ No newline at end of file +} From e8b9a4b0edf1e2f657be3b9310c32356a330f8ef Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Thu, 14 May 2020 11:23:44 -0400 Subject: [PATCH 05/44] Create cx.config --- cx.config | 43 +++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 43 insertions(+) create mode 100644 cx.config diff --git a/cx.config b/cx.config new file mode 100644 index 00000000..7a68d6f5 --- /dev/null +++ b/cx.config @@ -0,0 +1,43 @@ +{ + "version": 1.0, + "project": "XYZ-${repo}-${branch}", + "team": "/CxServer/Europe/Caderon", + "sast": { + "preset": "XSS and SQLi only", + "engineConfiguration": "Default", + "incremental": "false", + "forceScan" : "true", + "fileExcludes": "*.jpg,*.xml", + "folderExcludes": "*/test/*,*/unittests/*" + }, + "additionalProperties" : { + "cxFlow": { + "application": "APPLICATION DVJA", + "branches": ["develop", "master", "security"], + "emails": ["gem.immanuel@checkmarx.com"], + "bugTracker": "JIRA", + "jira": { + "project": "APPSEC", + "issue_type": "APPSECBUG", + "assignee": "gemify", + "opened_status": ["To Do","In Progress", "In Review"], + "closed_status": ["Closed","Done"], + "open_transition": "In Progress", + "close_transition": "Done", + "close_transition_field": "resolution", + "close_transition_value": "Done", + "priorities": { + "High": "High", + "Medium": "Medium", + "Low": "Low" + } + }, + "filters" : { + "severity": ["High", "Medium"], + "cwe": [""], + "category": [""], + "status": ["Confirmed", "Urgent"] + } + } + } +} From d9d7b49f658d8ccf0792327a641414b06256d2c9 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Thu, 14 May 2020 11:47:25 -0400 Subject: [PATCH 06/44] Update UserService.java --- src/main/java/com/appsecco/dvja/services/UserService.java | 1 + 1 file changed, 1 insertion(+) diff --git a/src/main/java/com/appsecco/dvja/services/UserService.java b/src/main/java/com/appsecco/dvja/services/UserService.java index d629da92..4de9c9d7 100644 --- a/src/main/java/com/appsecco/dvja/services/UserService.java +++ b/src/main/java/com/appsecco/dvja/services/UserService.java @@ -22,6 +22,7 @@ public class UserService { @PersistenceContext public void setEntityManager(EntityManager em) { this.entityManager = em; + // Test } public EntityManager getEntityManager() { return this.entityManager; } From 5b661e42abaa3f8d4f31743778020bf60d72007c Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Thu, 14 May 2020 11:49:11 -0400 Subject: [PATCH 07/44] Update docker-compose.yml --- docker-compose.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/docker-compose.yml b/docker-compose.yml index 08c0c1e1..605ca260 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -10,6 +10,7 @@ services: build: . depends_on: - mysql + - another ports: - "8080:8080" environment: From 4106cc2a41c71444b4c28b5e79f4a4e53fd73b3d Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Thu, 14 May 2020 11:49:50 -0400 Subject: [PATCH 08/44] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index d4fd7f89..11f31548 100644 --- a/README.md +++ b/README.md @@ -9,7 +9,7 @@ docker-compose up ``` Navigate to `http://localhost:8080` -To update image +To update images ``` docker-compose build From cf637572d24e8e61c0cd9a3dde22c17ea44f9453 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Thu, 14 May 2020 11:50:57 -0400 Subject: [PATCH 09/44] Update cx.config --- cx.config | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cx.config b/cx.config index 7a68d6f5..f11a069e 100644 --- a/cx.config +++ b/cx.config @@ -1,7 +1,7 @@ { "version": 1.0, "project": "XYZ-${repo}-${branch}", - "team": "/CxServer/Europe/Caderon", + "team": "\\CxServer\\Europe\\Caderon", "sast": { "preset": "XSS and SQLi only", "engineConfiguration": "Default", From d3c4ca91ef8f1b0874dd8ad1cf83f32aca4b73a4 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Thu, 14 May 2020 12:15:55 -0400 Subject: [PATCH 10/44] Update cx.config --- cx.config | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cx.config b/cx.config index f11a069e..0611774a 100644 --- a/cx.config +++ b/cx.config @@ -8,7 +8,7 @@ "incremental": "false", "forceScan" : "true", "fileExcludes": "*.jpg,*.xml", - "folderExcludes": "*/test/*,*/unittests/*" + "folderExcludes": "*/test/*,*/unittest/*" }, "additionalProperties" : { "cxFlow": { From 3e21ee913b8d6dfd8cbd780722be1c67bbef795c Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Thu, 14 May 2020 12:17:29 -0400 Subject: [PATCH 11/44] Update cx.config --- cx.config | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cx.config b/cx.config index 0611774a..3bf6459a 100644 --- a/cx.config +++ b/cx.config @@ -8,7 +8,7 @@ "incremental": "false", "forceScan" : "true", "fileExcludes": "*.jpg,*.xml", - "folderExcludes": "*/test/*,*/unittest/*" + "folderExcludes": "*/test/*,*/unittesst/*" }, "additionalProperties" : { "cxFlow": { From 6872b5060112e73a655b9f2a3d0206d9f3e616c4 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Thu, 14 May 2020 12:19:39 -0400 Subject: [PATCH 12/44] Update cx.config --- cx.config | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cx.config b/cx.config index 3bf6459a..f1ff09bc 100644 --- a/cx.config +++ b/cx.config @@ -1,6 +1,6 @@ { "version": 1.0, - "project": "XYZ-${repo}-${branch}", + "project": "XYZ-${repo}-${issueTracker}", "team": "\\CxServer\\Europe\\Caderon", "sast": { "preset": "XSS and SQLi only", From f86fe49b9123b7a4f9f9c3673bbe4234cf3960e9 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Thu, 14 May 2020 12:22:58 -0400 Subject: [PATCH 13/44] Update cx.config --- cx.config | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cx.config b/cx.config index f1ff09bc..2faf1a5a 100644 --- a/cx.config +++ b/cx.config @@ -1,6 +1,6 @@ { "version": 1.0, - "project": "XYZ-${repo}-${issueTracker}", + "project": "${project}", "team": "\\CxServer\\Europe\\Caderon", "sast": { "preset": "XSS and SQLi only", From 33580a2480a4a425e219ac6fc04c796613880237 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Thu, 14 May 2020 12:23:46 -0400 Subject: [PATCH 14/44] Update cx.config --- cx.config | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cx.config b/cx.config index 2faf1a5a..865592c4 100644 --- a/cx.config +++ b/cx.config @@ -8,7 +8,7 @@ "incremental": "false", "forceScan" : "true", "fileExcludes": "*.jpg,*.xml", - "folderExcludes": "*/test/*,*/unittesst/*" + "folderExcludes": "*/test/*,*/uittesst/*" }, "additionalProperties" : { "cxFlow": { From 21fd32fd7cbed6cdb90a461eda520f69cdeb7680 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Thu, 14 May 2020 12:32:03 -0400 Subject: [PATCH 15/44] Update cx.config --- cx.config | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/cx.config b/cx.config index 865592c4..98769714 100644 --- a/cx.config +++ b/cx.config @@ -1,6 +1,6 @@ { "version": 1.0, - "project": "${project}", + "project": "${repo}-${branch}", "team": "\\CxServer\\Europe\\Caderon", "sast": { "preset": "XSS and SQLi only", @@ -8,7 +8,7 @@ "incremental": "false", "forceScan" : "true", "fileExcludes": "*.jpg,*.xml", - "folderExcludes": "*/test/*,*/uittesst/*" + "folderExcludes": "*/test/*,*/unittesst/*" }, "additionalProperties" : { "cxFlow": { From 81a7eac0b9b5cb5fb3ba7231a450a0c4f8e9429e Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Thu, 14 May 2020 12:38:50 -0400 Subject: [PATCH 16/44] Update cx.config --- cx.config | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cx.config b/cx.config index 98769714..b443a68d 100644 --- a/cx.config +++ b/cx.config @@ -8,7 +8,7 @@ "incremental": "false", "forceScan" : "true", "fileExcludes": "*.jpg,*.xml", - "folderExcludes": "*/test/*,*/unittesst/*" + "folderExcludes": "*/test/*,*/undittesst/*" }, "additionalProperties" : { "cxFlow": { From 4b20e27a9c6ee588aedab056e0372b10bf9e4a46 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Thu, 14 May 2020 15:54:07 -0400 Subject: [PATCH 17/44] Update cx.config --- cx.config | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cx.config b/cx.config index b443a68d..98769714 100644 --- a/cx.config +++ b/cx.config @@ -8,7 +8,7 @@ "incremental": "false", "forceScan" : "true", "fileExcludes": "*.jpg,*.xml", - "folderExcludes": "*/test/*,*/undittesst/*" + "folderExcludes": "*/test/*,*/unittesst/*" }, "additionalProperties" : { "cxFlow": { From 48f2e7784fc3a66d323fe6ff29e139144867a1a0 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Thu, 14 May 2020 15:54:39 -0400 Subject: [PATCH 18/44] Update cx.config --- cx.config | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cx.config b/cx.config index 98769714..2a8e65f7 100644 --- a/cx.config +++ b/cx.config @@ -6,7 +6,7 @@ "preset": "XSS and SQLi only", "engineConfiguration": "Default", "incremental": "false", - "forceScan" : "true", + "forceScan" : "true", "fileExcludes": "*.jpg,*.xml", "folderExcludes": "*/test/*,*/unittesst/*" }, From 0dd31968449e9a7bdd973b65f7073f7e56e9ee2a Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Mon, 17 Aug 2020 12:27:51 -0400 Subject: [PATCH 19/44] Update HelloWorld.java --- src/main/java/com/appsecco/example/HelloWorld.java | 1 + 1 file changed, 1 insertion(+) diff --git a/src/main/java/com/appsecco/example/HelloWorld.java b/src/main/java/com/appsecco/example/HelloWorld.java index 9fd0ee37..a476fb74 100644 --- a/src/main/java/com/appsecco/example/HelloWorld.java +++ b/src/main/java/com/appsecco/example/HelloWorld.java @@ -26,6 +26,7 @@ */ public class HelloWorld extends ExampleSupport { + // A comment public String execute() throws Exception { setMessage(getText(MESSAGE)); // Some change From 810250e57773ae8ac862c35ace356323a6d4f0a7 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Mon, 17 Aug 2020 12:32:23 -0400 Subject: [PATCH 20/44] Update ExampleSupport.java --- src/main/java/com/appsecco/example/ExampleSupport.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/main/java/com/appsecco/example/ExampleSupport.java b/src/main/java/com/appsecco/example/ExampleSupport.java index 7a935319..b6b8bd7a 100644 --- a/src/main/java/com/appsecco/example/ExampleSupport.java +++ b/src/main/java/com/appsecco/example/ExampleSupport.java @@ -27,5 +27,5 @@ * Base Action class for the Tutorial package. */ public class ExampleSupport extends ActionSupport { - int a = 2; + int a = 3; } From 8c8d2f2a22db0ece8c03e668b704d63a44d88590 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Mon, 17 Aug 2020 12:34:56 -0400 Subject: [PATCH 21/44] Rename cx.config to cx.config.old --- cx.config => cx.config.old | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename cx.config => cx.config.old (100%) diff --git a/cx.config b/cx.config.old similarity index 100% rename from cx.config rename to cx.config.old From be8050423fa01215e0878eef95552da55e15adcb Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Mon, 17 Aug 2020 12:35:29 -0400 Subject: [PATCH 22/44] Rename cx.config to cx.config.old --- cx.config => cx.config.old | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename cx.config => cx.config.old (100%) diff --git a/cx.config b/cx.config.old similarity index 100% rename from cx.config rename to cx.config.old From ac7dde4e4aef2e0b50e6501e54c184619ec2d065 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Mon, 21 Sep 2020 08:27:58 -0400 Subject: [PATCH 23/44] Create blank.yml --- .github/workflows/blank.yml | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) create mode 100644 .github/workflows/blank.yml diff --git a/.github/workflows/blank.yml b/.github/workflows/blank.yml new file mode 100644 index 00000000..9ddbd2eb --- /dev/null +++ b/.github/workflows/blank.yml @@ -0,0 +1,33 @@ +# This is a basic workflow to help you get started with Actions + +name: CI + +# Controls when the action will run. Triggers the workflow on push or pull request +# events but only for the master branch +on: + push: + branches: [ master ] + pull_request: + branches: [ master ] + +# A workflow run is made up of one or more jobs that can run sequentially or in parallel +jobs: + # This workflow contains a single job called "build" + build: + # The type of runner that the job will run on + runs-on: ubuntu-latest + + # Steps represent a sequence of tasks that will be executed as part of the job + steps: + # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it + - uses: actions/checkout@v2 + + # Runs a single command using the runners shell + - name: Run a one-line script + run: echo Hello, world! + + # Runs a set of commands using the runners shell + - name: Run a multi-line script + run: | + echo Add other actions to build, + echo test, and deploy your project. From 73f48f259ba32d4358ad21f5c2d165764d2d7971 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Mon, 21 Sep 2020 08:40:22 -0400 Subject: [PATCH 24/44] Update blank.yml --- .github/workflows/blank.yml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/.github/workflows/blank.yml b/.github/workflows/blank.yml index 9ddbd2eb..dacbb7f3 100644 --- a/.github/workflows/blank.yml +++ b/.github/workflows/blank.yml @@ -31,3 +31,12 @@ jobs: run: | echo Add other actions to build, echo test, and deploy your project. + - name: Checkmarx Scan + uses: checkmarx-ts/checkmarx-github-action@v1.0.3 + with: + cxServer: http://d8177e3b2ee4.ngrok.io + cxUsername: admin@cx + cxPassword: Cx123456! + cxTeam: /CxServer/Americas/Engineering/git + cxProject: DJVA + cxPreset: Highs and Mediums From a8c7dfa108fa3ebe60435e3a70aeb060e93aca17 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Mon, 21 Sep 2020 08:42:40 -0400 Subject: [PATCH 25/44] Update log4j2.xml --- src/main/resources/log4j2.xml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/main/resources/log4j2.xml b/src/main/resources/log4j2.xml index 5db93ece..e2ab7333 100644 --- a/src/main/resources/log4j2.xml +++ b/src/main/resources/log4j2.xml @@ -2,7 +2,7 @@ - + @@ -13,4 +13,4 @@ - \ No newline at end of file + From 2699aa4995de4e2090decd56724a476264e01e8f Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Mon, 28 Sep 2020 15:35:41 -0400 Subject: [PATCH 26/44] Update Login.java --- src/main/java/com/appsecco/example/Login.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/main/java/com/appsecco/example/Login.java b/src/main/java/com/appsecco/example/Login.java index 2d0f9a4f..dcb8475b 100644 --- a/src/main/java/com/appsecco/example/Login.java +++ b/src/main/java/com/appsecco/example/Login.java @@ -30,7 +30,7 @@ public String execute() throws Exception { if (isInvalid(getPassword())) return INPUT; if (true) return ""; - return SUCCESS; + return SUCCESeS; } private boolean isInvalid(String value) { From b34bb4458210b35041cd39538615bbccb734c1ff Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Mon, 28 Sep 2020 15:36:29 -0400 Subject: [PATCH 27/44] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 11f31548..93297791 100644 --- a/README.md +++ b/README.md @@ -1,5 +1,5 @@ # Damn Vulnerable Java Application - +d ## Quick Start Install Docker and Docker Compose. From f8ceef07de99cff36e23b2681e4b5f3e2f671efa Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Mon, 15 Mar 2021 16:44:03 -0400 Subject: [PATCH 28/44] Delete blank.yml --- .github/workflows/blank.yml | 42 ------------------------------------- 1 file changed, 42 deletions(-) delete mode 100644 .github/workflows/blank.yml diff --git a/.github/workflows/blank.yml b/.github/workflows/blank.yml deleted file mode 100644 index dacbb7f3..00000000 --- a/.github/workflows/blank.yml +++ /dev/null @@ -1,42 +0,0 @@ -# This is a basic workflow to help you get started with Actions - -name: CI - -# Controls when the action will run. Triggers the workflow on push or pull request -# events but only for the master branch -on: - push: - branches: [ master ] - pull_request: - branches: [ master ] - -# A workflow run is made up of one or more jobs that can run sequentially or in parallel -jobs: - # This workflow contains a single job called "build" - build: - # The type of runner that the job will run on - runs-on: ubuntu-latest - - # Steps represent a sequence of tasks that will be executed as part of the job - steps: - # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it - - uses: actions/checkout@v2 - - # Runs a single command using the runners shell - - name: Run a one-line script - run: echo Hello, world! - - # Runs a set of commands using the runners shell - - name: Run a multi-line script - run: | - echo Add other actions to build, - echo test, and deploy your project. - - name: Checkmarx Scan - uses: checkmarx-ts/checkmarx-github-action@v1.0.3 - with: - cxServer: http://d8177e3b2ee4.ngrok.io - cxUsername: admin@cx - cxPassword: Cx123456! - cxTeam: /CxServer/Americas/Engineering/git - cxProject: DJVA - cxPreset: Highs and Mediums From 71d53f704acc3fa66ec64e58658ad3c9a5f8a105 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Mon, 15 Mar 2021 16:46:04 -0400 Subject: [PATCH 29/44] Update LICENSE --- LICENSE | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/LICENSE b/LICENSE index ebf3924e..04892e77 100644 --- a/LICENSE +++ b/LICENSE @@ -1,6 +1,6 @@ MIT License -Copyright (c) 2018 Appsecco +Copyright (c) 2018 Appsecco XYZ Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal From 4ace8816fa2697bb970d9e80280f6ff7220d0901 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Mon, 23 Aug 2021 12:27:36 -0400 Subject: [PATCH 30/44] Update cx.config.old --- cx.config.old | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cx.config.old b/cx.config.old index 2a8e65f7..1863af2b 100644 --- a/cx.config.old +++ b/cx.config.old @@ -12,7 +12,7 @@ }, "additionalProperties" : { "cxFlow": { - "application": "APPLICATION DVJA", + "application": "APPLICATION DVJAA", "branches": ["develop", "master", "security"], "emails": ["gem.immanuel@checkmarx.com"], "bugTracker": "JIRA", From 040a008f15af6748a2c23e077380175b3a79a217 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Mon, 23 Aug 2021 12:33:51 -0400 Subject: [PATCH 31/44] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 93297791..7aad1b89 100644 --- a/README.md +++ b/README.md @@ -1,4 +1,4 @@ -# Damn Vulnerable Java Application +# Damn Vulnerable Java ApplicationA d ## Quick Start From fa7921dddabfec775e226e8ddba055c87ae7e4af Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Mon, 23 Aug 2021 12:39:37 -0400 Subject: [PATCH 32/44] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 7aad1b89..93297791 100644 --- a/README.md +++ b/README.md @@ -1,4 +1,4 @@ -# Damn Vulnerable Java ApplicationA +# Damn Vulnerable Java Application d ## Quick Start From e4f0bfc472db8ded6960acd7f3b5af173fe2e942 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Mon, 23 Aug 2021 12:40:17 -0400 Subject: [PATCH 33/44] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 93297791..11f31548 100644 --- a/README.md +++ b/README.md @@ -1,5 +1,5 @@ # Damn Vulnerable Java Application -d + ## Quick Start Install Docker and Docker Compose. From a470aee4040f6481ee2bcb9c32262ad0321fe537 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Mon, 23 Aug 2021 15:11:51 -0400 Subject: [PATCH 34/44] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 11f31548..a9f79ff9 100644 --- a/README.md +++ b/README.md @@ -1,5 +1,5 @@ # Damn Vulnerable Java Application - +Testing PUSH event ## Quick Start Install Docker and Docker Compose. From 9a7d964e393fa27e07fa44a14bc7acadf53600ad Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Mon, 27 Sep 2021 13:44:36 -0400 Subject: [PATCH 35/44] Update pom.xml --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index ad967556..36c36b42 100644 --- a/pom.xml +++ b/pom.xml @@ -11,7 +11,7 @@ 2.3.30 2.3 - UTF-8 + UTF-9 3.0.5.RELEASE From acf07e99f11899434ed2eb6f026927238dc39137 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Mon, 27 Sep 2021 14:17:33 -0400 Subject: [PATCH 36/44] Update pom.xml --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 36c36b42..3f6bc0e7 100644 --- a/pom.xml +++ b/pom.xml @@ -10,7 +10,7 @@ 2.3.30 - 2.3 + 2.5 UTF-9 3.0.5.RELEASE From 1d898037c204ad2cf9dc3601cc967476aed94d10 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Wed, 20 Oct 2021 11:36:00 -0400 Subject: [PATCH 37/44] Update pom.xml --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 3f6bc0e7..461e0a69 100644 --- a/pom.xml +++ b/pom.xml @@ -9,7 +9,7 @@ dvja - 2.3.30 + 2.4.30 2.5 UTF-9 3.0.5.RELEASE From faf43ef8b5d2a9d644894a5163da99376661c830 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Fri, 11 Mar 2022 00:31:56 -0500 Subject: [PATCH 38/44] Update LICENSE --- LICENSE | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/LICENSE b/LICENSE index 04892e77..01c84c2f 100644 --- a/LICENSE +++ b/LICENSE @@ -1,4 +1,4 @@ -MIT License +MIT License (c) Copyright (c) 2018 Appsecco XYZ From 65f81301d62d852cd9d5ccc5bd5197b434eaf87d Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Fri, 11 Mar 2022 00:33:27 -0500 Subject: [PATCH 39/44] Update LICENSE --- LICENSE | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/LICENSE b/LICENSE index 01c84c2f..abdea5f2 100644 --- a/LICENSE +++ b/LICENSE @@ -1,4 +1,4 @@ -MIT License (c) +MIT License (c) TT Copyright (c) 2018 Appsecco XYZ From 2371c1a64bdbc957093466a91203b838493fcce0 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Fri, 11 Mar 2022 00:37:49 -0500 Subject: [PATCH 40/44] Create cx.config --- cx.config | 9 +++++++++ 1 file changed, 9 insertions(+) create mode 100644 cx.config diff --git a/cx.config b/cx.config new file mode 100644 index 00000000..c90034fc --- /dev/null +++ b/cx.config @@ -0,0 +1,9 @@ +{ + "version": 1.0, + "project": "dvja-master", + "team": "/CxServer/Americas/Engineering", + "sast": { + "incremental": "false", + "forceScan": "true" + } +} From d0696b2a053951b0dd89eb3476f2acdb22053640 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Mon, 21 Mar 2022 14:28:31 -0400 Subject: [PATCH 41/44] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index a9f79ff9..cfc1eb72 100644 --- a/README.md +++ b/README.md @@ -1,5 +1,5 @@ # Damn Vulnerable Java Application -Testing PUSH event +Testing PUSH event 11 ## Quick Start Install Docker and Docker Compose. From 272bcc1960d8483d935ceb8ae795416da426a95f Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Mon, 21 Mar 2022 14:29:42 -0400 Subject: [PATCH 42/44] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index cfc1eb72..522007f4 100644 --- a/README.md +++ b/README.md @@ -1,5 +1,5 @@ # Damn Vulnerable Java Application -Testing PUSH event 11 +Testing PUSH event 12 ## Quick Start Install Docker and Docker Compose. From 4ff95614e6d805d2e252ec04fe4b61e059433a01 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Mon, 21 Mar 2022 14:46:45 -0400 Subject: [PATCH 43/44] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 522007f4..273d6106 100644 --- a/README.md +++ b/README.md @@ -1,5 +1,5 @@ # Damn Vulnerable Java Application -Testing PUSH event 12 +Testing PR event 1 ## Quick Start Install Docker and Docker Compose. From 759ca2bfd7598937a602d52dcbddfcd8e822fb32 Mon Sep 17 00:00:00 2001 From: Gem Immanuel <25984676+gemgit7@users.noreply.github.com> Date: Mon, 21 Mar 2022 14:49:44 -0400 Subject: [PATCH 44/44] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 273d6106..c1699152 100644 --- a/README.md +++ b/README.md @@ -1,5 +1,5 @@ # Damn Vulnerable Java Application -Testing PR event 1 +Testing PR event 2 ## Quick Start Install Docker and Docker Compose.