DevSecOps

This repo is used for testing DevSecOps practices and toolsets, and is used for demonstration purposes only.

WARNING

This repo contains code that is purposefully vulnerable and insecure. Use at your own risk!

The following YAML-based Azure DevOps (ADO) pipelines have been created and tested:

The following YAML-based GitHub Actions (GHA) Workflows have been created and tested:

Name		Name	Last commit message	Last commit date
Latest commit History 219 Commits
.devcontainer		.devcontainer
.github		.github
ARMTTK-TestFiles		ARMTTK-TestFiles
AzureBicep-Examples		AzureBicep-Examples
TerraformCompliance-Features		TerraformCompliance-Features
TerraformComplianceTests		TerraformComplianceTests
YELP-TestData		YELP-TestData
artifacts-credprovider		artifacts-credprovider
azure-pipelines		azure-pipelines
src		src
terraform		terraform
tests		tests
.dockerignore		.dockerignore
.gitignore		.gitignore
CodeCoverage.runsettings		CodeCoverage.runsettings
Dockerfile		Dockerfile
LICENSE		LICENSE
README.md		README.md
SECURITY.md		SECURITY.md
_config.yml		_config.yml
build-handlebars-template.md		build-handlebars-template.md
eShopOnWeb-CI.yml		eShopOnWeb-CI.yml
eShopOnWeb-Docker-CI.yml		eShopOnWeb-Docker-CI.yml
eShopOnWeb.sln		eShopOnWeb.sln
kics-config.yml		kics-config.yml
nuget.config		nuget.config
suppressions.json		suppressions.json
whitesource-fs-agent.config		whitesource-fs-agent.config