Skip to content

simple javascript vulnerable repository to show code scanning or dependency-review easily

Notifications You must be signed in to change notification settings

octodemo/code-scanning-demo-template

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

15 Commits
 
 
 
 
 
 
 
 

Repository files navigation

Code Scanning JavaScript Demo

This repository demonstrates an instance of CWE-020: Improper Imput Validation.

  1. Run through the setup flow in the security tab to enable code scanning. Commit directly to master.
  2. Go to actions, and confirm that the analysis has run successfully.
  3. Edit script.js and add this code snippet. Create a PR. Wait for validation.
function endsWith(x, y) {
  return x.lastIndexOf(y) === x.length - y.length;
}

About

simple javascript vulnerable repository to show code scanning or dependency-review easily

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published