From cd1497ad8d8f9cb8b0f8bb3191e82b71235192ee Mon Sep 17 00:00:00 2001 From: Ilyes Ben Dlala Date: Tue, 28 Sep 2021 16:51:35 +0200 Subject: [PATCH 01/11] Added Old-joomla demo-target's helm gernerated files Signed-off-by: Ilyes Ben Dlala --- demo-targets/old-joomla/.helm-docs.gotmpl | 40 ++++++++++ demo-targets/old-joomla/.helmignore | 23 ++++++ demo-targets/old-joomla/Chart.yaml | 20 +++++ demo-targets/old-joomla/docs/.gitkeep | 1 + demo-targets/old-joomla/questions.yml | 8 ++ demo-targets/old-joomla/templates/NOTES.txt | 22 ++++++ .../old-joomla/templates/_helpers.tpl | 60 +++++++++++++++ .../old-joomla/templates/deployment.yaml | 62 ++++++++++++++++ .../old-joomla/templates/ingress.yaml | 65 +++++++++++++++++ .../old-joomla/templates/service.yaml | 15 ++++ .../templates/tests/test-connection.yaml | 15 ++++ demo-targets/old-joomla/values.yaml | 73 +++++++++++++++++++ 12 files changed, 404 insertions(+) create mode 100644 demo-targets/old-joomla/.helm-docs.gotmpl create mode 100644 demo-targets/old-joomla/.helmignore create mode 100644 demo-targets/old-joomla/Chart.yaml create mode 100644 demo-targets/old-joomla/docs/.gitkeep create mode 100644 demo-targets/old-joomla/questions.yml create mode 100644 demo-targets/old-joomla/templates/NOTES.txt create mode 100644 demo-targets/old-joomla/templates/_helpers.tpl create mode 100644 demo-targets/old-joomla/templates/deployment.yaml create mode 100644 demo-targets/old-joomla/templates/ingress.yaml create mode 100644 demo-targets/old-joomla/templates/service.yaml create mode 100644 demo-targets/old-joomla/templates/tests/test-connection.yaml create mode 100644 demo-targets/old-joomla/values.yaml diff --git a/demo-targets/old-joomla/.helm-docs.gotmpl b/demo-targets/old-joomla/.helm-docs.gotmpl new file mode 100644 index 0000000000..4cdb2fd39f --- /dev/null +++ b/demo-targets/old-joomla/.helm-docs.gotmpl @@ -0,0 +1,40 @@ +{{- /* +SPDX-FileCopyrightText: 2021 iteratec GmbH + +SPDX-License-Identifier: Apache-2.0 +*/ -}} + +{{- define "extra.docsSection" -}} +--- +title: "Old Joomla" +category: "target" +type: "Website" +state: "released" +appVersion: "{{ template "chart.appVersion" . }}" +usecase: "Modern insecure web application" +--- +{{- end }} + +{{- define "extra.dockerDeploymentSection" -}} +## Supported Tags +- `latest` (represents the latest stable release build) +- tagged releases, e.g. `3.0.0`, `2.9.0`, `2.8.0`, `2.7.0` +{{- end }} + +{{- define "extra.chartAboutSection" -}} +## What is Old Joomla? + +Insecure & Outdated Joomla Instance: Never expose it to the internet! + +### Source Code + +* + +{{- end }} + +{{- define "extra.scannerConfigurationSection" -}}{{- end }} + +{{- define "extra.chartConfigurationSection" -}}{{- end }} + +{{- define "extra.scannerLinksSection" -}} +{{- end }} diff --git a/demo-targets/old-joomla/.helmignore b/demo-targets/old-joomla/.helmignore new file mode 100644 index 0000000000..0e8a0eb36f --- /dev/null +++ b/demo-targets/old-joomla/.helmignore @@ -0,0 +1,23 @@ +# Patterns to ignore when building packages. +# This supports shell glob matching, relative path matching, and +# negation (prefixed with !). Only one pattern per line. +.DS_Store +# Common VCS dirs +.git/ +.gitignore +.bzr/ +.bzrignore +.hg/ +.hgignore +.svn/ +# Common backup files +*.swp +*.bak +*.tmp +*.orig +*~ +# Various IDEs +.project +.idea/ +*.tmproj +.vscode/ diff --git a/demo-targets/old-joomla/Chart.yaml b/demo-targets/old-joomla/Chart.yaml new file mode 100644 index 0000000000..55e479d992 --- /dev/null +++ b/demo-targets/old-joomla/Chart.yaml @@ -0,0 +1,20 @@ +# SPDX-FileCopyrightText: 2021 iteratec GmbH +# +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: v2 +version: v3.1.0-alpha1 +appVersion: "v3.6.5" +name: old-joomla +description: "Insecure & Outdated Joomla Instance: Never expose it to the internet!" +type: application +home: https://joomla.org/ +icon: https://upload.wikimedia.org/wikipedia/commons/e/e8/Joomla%21-Logo.svg +keywords: + - vulnerable + - joomla +sources: + - https://github.com/secureCodeBox/secureCodeBox/tree/master/demo-targets/old-joomla +maintainers: + - name: iteratec GmbH + email: securecodebox@iteratec.com diff --git a/demo-targets/old-joomla/docs/.gitkeep b/demo-targets/old-joomla/docs/.gitkeep new file mode 100644 index 0000000000..2dc80fc4b6 --- /dev/null +++ b/demo-targets/old-joomla/docs/.gitkeep @@ -0,0 +1 @@ +# This file is added to allow creation of README files. If that is done delete it. \ No newline at end of file diff --git a/demo-targets/old-joomla/questions.yml b/demo-targets/old-joomla/questions.yml new file mode 100644 index 0000000000..65b93b03d2 --- /dev/null +++ b/demo-targets/old-joomla/questions.yml @@ -0,0 +1,8 @@ +# SPDX-FileCopyrightText: 2021 iteratec GmbH +# +# SPDX-License-Identifier: Apache-2.0 + +categories: + - "Vulnerable App" + - "Demo Scan Target" +questions: [] diff --git a/demo-targets/old-joomla/templates/NOTES.txt b/demo-targets/old-joomla/templates/NOTES.txt new file mode 100644 index 0000000000..bd7d7b433c --- /dev/null +++ b/demo-targets/old-joomla/templates/NOTES.txt @@ -0,0 +1,22 @@ +1. Get the application URL by running these commands: +{{- if .Values.ingress.enabled }} +{{- range $host := .Values.ingress.hosts }} + {{- range .paths }} + http{{ if $.Values.ingress.tls }}s{{ end }}://{{ $host.host }}{{ .path }} + {{- end }} +{{- end }} +{{- else if contains "NodePort" .Values.service.type }} + export NODE_PORT=$(kubectl get --namespace {{ .Release.Namespace }} -o jsonpath="{.spec.ports[0].nodePort}" services {{ include "old-joomla.fullname" . }}) + export NODE_IP=$(kubectl get nodes --namespace {{ .Release.Namespace }} -o jsonpath="{.items[0].status.addresses[0].address}") + echo http://$NODE_IP:$NODE_PORT +{{- else if contains "LoadBalancer" .Values.service.type }} + NOTE: It may take a few minutes for the LoadBalancer IP to be available. + You can watch the status of by running 'kubectl get --namespace {{ .Release.Namespace }} svc -w {{ include "old-joomla.fullname" . }}' + export SERVICE_IP=$(kubectl get svc --namespace {{ .Release.Namespace }} {{ include "old-joomla.fullname" . }} --template "{{"{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}"}}") + echo http://$SERVICE_IP:{{ .Values.service.port }} +{{- else if contains "ClusterIP" .Values.service.type }} + export POD_NAME=$(kubectl get pods --namespace {{ .Release.Namespace }} -l "app.kubernetes.io/name={{ include "old-joomla.name" . }},app.kubernetes.io/instance={{ .Release.Name }}" -o jsonpath="{.items[0].metadata.name}") + export CONTAINER_PORT=$(kubectl get pod --namespace {{ .Release.Namespace }} $POD_NAME -o jsonpath="{.spec.containers[0].ports[0].containerPort}") + echo "Visit http://127.0.0.1:8080 to use your application" + kubectl --namespace {{ .Release.Namespace }} port-forward $POD_NAME 8080:$CONTAINER_PORT +{{- end }} diff --git a/demo-targets/old-joomla/templates/_helpers.tpl b/demo-targets/old-joomla/templates/_helpers.tpl new file mode 100644 index 0000000000..45a64ee360 --- /dev/null +++ b/demo-targets/old-joomla/templates/_helpers.tpl @@ -0,0 +1,60 @@ +{{- /* +SPDX-FileCopyrightText: 2021 iteratec GmbH + +SPDX-License-Identifier: Apache-2.0 +*/ -}} +{{/* +Expand the name of the chart. +*/}} +{{- define "old-joomla.name" -}} +{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Create a default fully qualified app name. +We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). +If release name contains chart name it will be used as a full name. +*/}} +{{- define "old-joomla.fullname" -}} +{{- if .Values.fullnameOverride }} +{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }} +{{- else }} +{{- $name := default .Chart.Name .Values.nameOverride }} +{{- if contains $name .Release.Name }} +{{- .Release.Name | trunc 63 | trimSuffix "-" }} +{{- else }} +{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }} +{{- end }} +{{- end }} +{{- end }} + +{{/* +Create chart name and version as used by the chart label. +*/}} +{{- define "old-joomla.chart" -}} +{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Common labels +*/}} +{{- define "old-joomla.labels" -}} +helm.sh/chart: {{ include "old-joomla.chart" . }} +{{ include "old-joomla.selectorLabels" . }} +{{- if .Chart.AppVersion }} +app.kubernetes.io/version: {{ .Chart.AppVersion | quote }} +{{- end }} +app.kubernetes.io/managed-by: {{ .Release.Service }} +{{- end }} + +{{/* +Selector labels +*/}} +{{- define "old-joomla.selectorLabels" -}} +app.kubernetes.io/name: {{ include "old-joomla.name" . }} +app.kubernetes.io/instance: {{ .Release.Name }} +{{- end }} + +{{- define "old-joomla.annotations" -}} +{{ .Values.annotations | toYaml }} +{{- end -}} diff --git a/demo-targets/old-joomla/templates/deployment.yaml b/demo-targets/old-joomla/templates/deployment.yaml new file mode 100644 index 0000000000..d2810d4b9c --- /dev/null +++ b/demo-targets/old-joomla/templates/deployment.yaml @@ -0,0 +1,62 @@ +# SPDX-FileCopyrightText: 2021 iteratec GmbH +# +# SPDX-License-Identifier: Apache-2.0 + +apiVersion: apps/v1 +kind: Deployment +metadata: + name: {{ include "old-joomla.fullname" . }} + labels: + {{- include "old-joomla.labels" . | nindent 4 }} +spec: + replicas: {{ .Values.replicaCount }} + selector: + matchLabels: + {{- include "old-joomla.selectorLabels" . | nindent 6 }} + template: + metadata: + {{- with .Values.podAnnotations }} + annotations: + {{- toYaml . | nindent 8 }} + {{- end }} + labels: + {{- include "old-joomla.selectorLabels" . | nindent 8 }} + spec: + {{- with .Values.imagePullSecrets }} + imagePullSecrets: + {{- toYaml . | nindent 8 }} + {{- end }} + securityContext: + {{- toYaml .Values.podSecurityContext | nindent 8 }} + containers: + - name: {{ .Chart.Name }} + securityContext: + {{- toYaml .Values.securityContext | nindent 12 }} + image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}" + imagePullPolicy: {{ .Values.image.pullPolicy }} + ports: + - name: http + containerPort: 80 + protocol: TCP + livenessProbe: + httpGet: + path: / + port: http + readinessProbe: + httpGet: + path: / + port: http + resources: + {{- toYaml .Values.resources | nindent 12 }} + {{- with .Values.nodeSelector }} + nodeSelector: + {{- toYaml . | nindent 8 }} + {{- end }} + {{- with .Values.affinity }} + affinity: + {{- toYaml . | nindent 8 }} + {{- end }} + {{- with .Values.tolerations }} + tolerations: + {{- toYaml . | nindent 8 }} + {{- end }} diff --git a/demo-targets/old-joomla/templates/ingress.yaml b/demo-targets/old-joomla/templates/ingress.yaml new file mode 100644 index 0000000000..2a6afef2bd --- /dev/null +++ b/demo-targets/old-joomla/templates/ingress.yaml @@ -0,0 +1,65 @@ +# SPDX-FileCopyrightText: 2021 iteratec GmbH +# +# SPDX-License-Identifier: Apache-2.0 + +{{- if .Values.ingress.enabled -}} +{{- $fullName := include "old-joomla.fullname" . -}} +{{- $svcPort := .Values.service.port -}} +{{- if and .Values.ingress.className (not (semverCompare ">=1.18-0" .Capabilities.KubeVersion.GitVersion)) }} + {{- if not (hasKey .Values.ingress.annotations "kubernetes.io/ingress.class") }} + {{- $_ := set .Values.ingress.annotations "kubernetes.io/ingress.class" .Values.ingress.className}} + {{- end }} +{{- end }} +{{- if semverCompare ">=1.19-0" .Capabilities.KubeVersion.GitVersion -}} +apiVersion: networking.k8s.io/v1 +{{- else if semverCompare ">=1.14-0" .Capabilities.KubeVersion.GitVersion -}} +apiVersion: networking.k8s.io/v1beta1 +{{- else -}} +apiVersion: extensions/v1beta1 +{{- end }} +kind: Ingress +metadata: + name: {{ $fullName }} + labels: + {{- include "old-joomla.labels" . | nindent 4 }} + {{- with .Values.ingress.annotations }} + annotations: + {{- toYaml . | nindent 4 }} + {{- end }} +spec: + {{- if and .Values.ingress.className (semverCompare ">=1.18-0" .Capabilities.KubeVersion.GitVersion) }} + ingressClassName: {{ .Values.ingress.className }} + {{- end }} + {{- if .Values.ingress.tls }} + tls: + {{- range .Values.ingress.tls }} + - hosts: + {{- range .hosts }} + - {{ . | quote }} + {{- end }} + secretName: {{ .secretName }} + {{- end }} + {{- end }} + rules: + {{- range .Values.ingress.hosts }} + - host: {{ .host | quote }} + http: + paths: + {{- range .paths }} + - path: {{ .path }} + {{- if and .pathType (semverCompare ">=1.18-0" $.Capabilities.KubeVersion.GitVersion) }} + pathType: {{ .pathType }} + {{- end }} + backend: + {{- if semverCompare ">=1.19-0" $.Capabilities.KubeVersion.GitVersion }} + service: + name: {{ $fullName }} + port: + number: {{ $svcPort }} + {{- else }} + serviceName: {{ $fullName }} + servicePort: {{ $svcPort }} + {{- end }} + {{- end }} + {{- end }} +{{- end }} diff --git a/demo-targets/old-joomla/templates/service.yaml b/demo-targets/old-joomla/templates/service.yaml new file mode 100644 index 0000000000..ddbebb0aac --- /dev/null +++ b/demo-targets/old-joomla/templates/service.yaml @@ -0,0 +1,15 @@ +apiVersion: v1 +kind: Service +metadata: + name: {{ include "old-joomla.fullname" . }} + labels: + {{- include "old-joomla.labels" . | nindent 4 }} +spec: + type: {{ .Values.service.type }} + ports: + - port: {{ .Values.service.port }} + targetPort: http + protocol: TCP + name: http + selector: + {{- include "old-joomla.selectorLabels" . | nindent 4 }} diff --git a/demo-targets/old-joomla/templates/tests/test-connection.yaml b/demo-targets/old-joomla/templates/tests/test-connection.yaml new file mode 100644 index 0000000000..b8adcddf55 --- /dev/null +++ b/demo-targets/old-joomla/templates/tests/test-connection.yaml @@ -0,0 +1,15 @@ +apiVersion: v1 +kind: Pod +metadata: + name: "{{ include "old-joomla.fullname" . }}-test-connection" + labels: + {{- include "old-joomla.labels" . | nindent 4 }} + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: busybox + command: ['wget'] + args: ['{{ include "old-joomla.fullname" . }}:{{ .Values.service.port }}'] + restartPolicy: Never diff --git a/demo-targets/old-joomla/values.yaml b/demo-targets/old-joomla/values.yaml new file mode 100644 index 0000000000..03907cd09a --- /dev/null +++ b/demo-targets/old-joomla/values.yaml @@ -0,0 +1,73 @@ +# SPDX-FileCopyrightText: 2021 iteratec GmbH +# +# SPDX-License-Identifier: Apache-2.0 + +# Default values for old-wordpress. +# This is a YAML-formatted file. +# Declare variables to be passed into your templates. + +replicaCount: 1 + +image: + # image.repository -- Container Image + repository: docker.io/securecodebox/old-joomla + # image.tag -- The image tag + # @default -- defaults to the appVersion + tag: null + pullPolicy: IfNotPresent + +imagePullSecrets: [] +nameOverride: "" +fullnameOverride: "" + +# -- add labels to the deployment, service and pods +labels: {} + +# -- add annotations to the deployment, service and pods +annotations: {} + +podSecurityContext: {} + # fsGroup: 2000 + +securityContext: {} + # capabilities: + # drop: + # - ALL + # readOnlyRootFilesystem: true + # runAsNonRoot: true + # runAsUser: 1000 + +service: + type: ClusterIP + port: 80 + +ingress: + enabled: false + annotations: {} + # kubernetes.io/ingress.class: nginx + # kubernetes.io/tls-acme: "true" + hosts: + - host: chart-example.local + paths: [] + tls: [] + # - secretName: chart-example-tls + # hosts: + # - chart-example.local + +resources: {} + # We usually recommend not to specify default resources and to leave this as a conscious + # choice for the user. This also increases chances charts run on environments with little + # resources, such as Minikube. If you do want to specify resources, uncomment the following + # lines, adjust them as necessary, and remove the curly braces after 'resources:'. + # limits: + # cpu: 100m + # memory: 128Mi + # requests: + # cpu: 100m + # memory: 128Mi + +nodeSelector: {} + +tolerations: [] + +affinity: {} From 9cb2797b6dc9d2b972e9145d457d7f737665f515 Mon Sep 17 00:00:00 2001 From: Ilyes Ben Dlala Date: Tue, 28 Sep 2021 16:52:29 +0200 Subject: [PATCH 02/11] Add Old-joomla demo-target's Dockerfile Signed-off-by: Ilyes Ben Dlala --- demo-targets/old-joomla/container/Dockerfile | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 demo-targets/old-joomla/container/Dockerfile diff --git a/demo-targets/old-joomla/container/Dockerfile b/demo-targets/old-joomla/container/Dockerfile new file mode 100644 index 0000000000..d7e01b7b78 --- /dev/null +++ b/demo-targets/old-joomla/container/Dockerfile @@ -0,0 +1,14 @@ +# SPDX-FileCopyrightText: 2021 iteratec GmbH +# +# SPDX-License-Identifier: Apache-2.0 + +FROM alpine:3.13 as base + +WORKDIR /html +RUN apk add wget unzip \ +&& wget https://github.com/joomla/joomla-cms/releases/download/3.6.5/Joomla_3.6.5-Stable-Full_Package.zip \ +&& unzip Joomla_3.6.5-Stable-Full_Package.zip \ +&& rm Joomla_3.6.5-Stable-Full_Package.zip + +FROM php:7.2-apache +COPY --from=base /html /var/www/html \ No newline at end of file From 7e69436256ca0ae975b05222bb1d1617a0fad9b2 Mon Sep 17 00:00:00 2001 From: Ilyesbdlala Date: Tue, 28 Sep 2021 14:53:29 +0000 Subject: [PATCH 03/11] Updating Helm Docs Signed-off-by: GitHub Actions --- demo-targets/old-joomla/README.md | 91 ++++++++++++++ .../old-joomla/docs/README.ArtifactHub.md | 113 ++++++++++++++++++ .../docs/README.DockerHub-Target.md | 86 +++++++++++++ 3 files changed, 290 insertions(+) create mode 100644 demo-targets/old-joomla/README.md create mode 100644 demo-targets/old-joomla/docs/README.ArtifactHub.md create mode 100644 demo-targets/old-joomla/docs/README.DockerHub-Target.md diff --git a/demo-targets/old-joomla/README.md b/demo-targets/old-joomla/README.md new file mode 100644 index 0000000000..a67c052d0b --- /dev/null +++ b/demo-targets/old-joomla/README.md @@ -0,0 +1,91 @@ +--- +title: "Old Joomla" +category: "target" +type: "Website" +state: "released" +appVersion: "v3.6.5" +usecase: "Modern insecure web application" +--- + + + + +

+ License Apache-2.0 + GitHub release (latest SemVer) + OWASP Incubator Project + Artifact HUB + GitHub Repo stars + Twitter Follower +

+ +## What is Old Joomla? + +Insecure & Outdated Joomla Instance: Never expose it to the internet! + +### Source Code + +* + +## Deployment +The old-joomla chart can be deployed via helm: + +```bash +# Install HelmChart (use -n to configure another namespace) +helm upgrade --install old-joomla secureCodeBox/old-joomla +``` + +## Values + +| Key | Type | Default | Description | +|-----|------|---------|-------------| +| affinity | object | `{}` | | +| annotations | object | `{}` | add annotations to the deployment, service and pods | +| fullnameOverride | string | `""` | | +| image.pullPolicy | string | `"IfNotPresent"` | | +| image.repository | string | `"docker.io/securecodebox/old-joomla"` | Container Image | +| image.tag | string | defaults to the appVersion | The image tag | +| imagePullSecrets | list | `[]` | | +| ingress.annotations | object | `{}` | | +| ingress.enabled | bool | `false` | | +| ingress.hosts[0].host | string | `"chart-example.local"` | | +| ingress.hosts[0].paths | list | `[]` | | +| ingress.tls | list | `[]` | | +| labels | object | `{}` | add labels to the deployment, service and pods | +| nameOverride | string | `""` | | +| nodeSelector | object | `{}` | | +| podSecurityContext | object | `{}` | | +| replicaCount | int | `1` | | +| resources | object | `{}` | | +| securityContext | object | `{}` | | +| service.port | int | `80` | | +| service.type | string | `"ClusterIP"` | | +| tolerations | list | `[]` | | + +## License +[![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://opensource.org/licenses/Apache-2.0) + +Code of secureCodeBox is licensed under the [Apache License 2.0][scb-license]. + +[scb-owasp]: https://www.owasp.org/index.php/OWASP_secureCodeBox +[scb-docs]: https://docs.securecodebox.io/ +[scb-site]: https://www.securecodebox.io/ +[scb-github]: https://github.com/secureCodeBox/ +[scb-twitter]: https://twitter.com/secureCodeBox +[scb-slack]: https://join.slack.com/t/securecodebox/shared_invite/enQtNDU3MTUyOTM0NTMwLTBjOWRjNjVkNGEyMjQ0ZGMyNDdlYTQxYWQ4MzNiNGY3MDMxNThkZjJmMzY2NDRhMTk3ZWM3OWFkYmY1YzUxNTU +[scb-license]: https://github.com/secureCodeBox/secureCodeBox/blob/master/LICENSE + diff --git a/demo-targets/old-joomla/docs/README.ArtifactHub.md b/demo-targets/old-joomla/docs/README.ArtifactHub.md new file mode 100644 index 0000000000..7e72076dba --- /dev/null +++ b/demo-targets/old-joomla/docs/README.ArtifactHub.md @@ -0,0 +1,113 @@ + + + +

+ License Apache-2.0 + GitHub release (latest SemVer) + OWASP Incubator Project + Artifact HUB + GitHub Repo stars + Twitter Follower +

+ +## What is OWASP secureCodeBox? + +

+ secureCodeBox Logo +

+ +_[OWASP secureCodeBox][scb-github]_ is an automated and scalable open source solution that can be used to integrate various *security vulnerability scanners* with a simple and lightweight interface. The _secureCodeBox_ mission is to support *DevSecOps* Teams to make it easy to automate security vulnerability testing in different scenarios. + +With the _secureCodeBox_ we provide a toolchain for continuous scanning of applications to find the low-hanging fruit issues early in the development process and free the resources of the penetration tester to concentrate on the major security issues. + +The secureCodeBox project is running on [Kubernetes](https://kubernetes.io/). To install it you need [Helm](https://helm.sh), a package manager for Kubernetes. It is also possible to start the different integrated security vulnerability scanners based on a docker infrastructure. + +### Quickstart with secureCodeBox on kubernetes + +You can find resources to help you get started on our [documentation website](https://docs.securecodebox.io) including instruction on how to [install the secureCodeBox project](https://docs.securecodebox.io/docs/getting-started/installation) and guides to help you [run your first scans](https://docs.securecodebox.io/docs/getting-started/first-scans) with it. + +## What is Old Joomla? + +Insecure & Outdated Joomla Instance: Never expose it to the internet! + +### Source Code + +* + +## Deployment +The old-joomla chart can be deployed via helm: + +```bash +# Install HelmChart (use -n to configure another namespace) +helm upgrade --install old-joomla secureCodeBox/old-joomla +``` + +## Values + +| Key | Type | Default | Description | +|-----|------|---------|-------------| +| affinity | object | `{}` | | +| annotations | object | `{}` | add annotations to the deployment, service and pods | +| fullnameOverride | string | `""` | | +| image.pullPolicy | string | `"IfNotPresent"` | | +| image.repository | string | `"docker.io/securecodebox/old-joomla"` | Container Image | +| image.tag | string | defaults to the appVersion | The image tag | +| imagePullSecrets | list | `[]` | | +| ingress.annotations | object | `{}` | | +| ingress.enabled | bool | `false` | | +| ingress.hosts[0].host | string | `"chart-example.local"` | | +| ingress.hosts[0].paths | list | `[]` | | +| ingress.tls | list | `[]` | | +| labels | object | `{}` | add labels to the deployment, service and pods | +| nameOverride | string | `""` | | +| nodeSelector | object | `{}` | | +| podSecurityContext | object | `{}` | | +| replicaCount | int | `1` | | +| resources | object | `{}` | | +| securityContext | object | `{}` | | +| service.port | int | `80` | | +| service.type | string | `"ClusterIP"` | | +| tolerations | list | `[]` | | + +## Contributing + +Contributions are welcome and extremely helpful 🙌 +Please have a look at [Contributing](./CONTRIBUTING.md) + +## Community + +You are welcome, please join us on... 👋 + +- [GitHub][scb-github] +- [Slack][scb-slack] +- [Twitter][scb-twitter] + +secureCodeBox is an official [OWASP][scb-owasp] project. + +## License +[![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://opensource.org/licenses/Apache-2.0) + +Code of secureCodeBox is licensed under the [Apache License 2.0][scb-license]. + +[scb-owasp]: https://www.owasp.org/index.php/OWASP_secureCodeBox +[scb-docs]: https://docs.securecodebox.io/ +[scb-site]: https://www.securecodebox.io/ +[scb-github]: https://github.com/secureCodeBox/ +[scb-twitter]: https://twitter.com/secureCodeBox +[scb-slack]: https://join.slack.com/t/securecodebox/shared_invite/enQtNDU3MTUyOTM0NTMwLTBjOWRjNjVkNGEyMjQ0ZGMyNDdlYTQxYWQ4MzNiNGY3MDMxNThkZjJmMzY2NDRhMTk3ZWM3OWFkYmY1YzUxNTU +[scb-license]: https://github.com/secureCodeBox/secureCodeBox/blob/master/LICENSE + diff --git a/demo-targets/old-joomla/docs/README.DockerHub-Target.md b/demo-targets/old-joomla/docs/README.DockerHub-Target.md new file mode 100644 index 0000000000..eea8ef68ad --- /dev/null +++ b/demo-targets/old-joomla/docs/README.DockerHub-Target.md @@ -0,0 +1,86 @@ + + + +

+ License Apache-2.0 + GitHub release (latest SemVer) + OWASP Incubator Project + Artifact HUB + GitHub Repo stars + Twitter Follower +

+ +## What is OWASP secureCodeBox? + +

+ secureCodeBox Logo +

+ +_[OWASP secureCodeBox][scb-github]_ is an automated and scalable open source solution that can be used to integrate various *security vulnerability scanners* with a simple and lightweight interface. The _secureCodeBox_ mission is to support *DevSecOps* Teams to make it easy to automate security vulnerability testing in different scenarios. + +With the _secureCodeBox_ we provide a toolchain for continuous scanning of applications to find the low-hanging fruit issues early in the development process and free the resources of the penetration tester to concentrate on the major security issues. + +The secureCodeBox project is running on [Kubernetes](https://kubernetes.io/). To install it you need [Helm](https://helm.sh), a package manager for Kubernetes. It is also possible to start the different integrated security vulnerability scanners based on a docker infrastructure. + +### Quickstart with secureCodeBox on kubernetes + +You can find resources to help you get started on our [documentation website](https://docs.securecodebox.io) including instruction on how to [install the secureCodeBox project](https://docs.securecodebox.io/docs/getting-started/installation) and guides to help you [run your first scans](https://docs.securecodebox.io/docs/getting-started/first-scans) with it. + +## Supported Tags +- `latest` (represents the latest stable release build) +- tagged releases, e.g. `3.0.0`, `2.9.0`, `2.8.0`, `2.7.0` + +## How to use this image +This image is a potentially vulnerable service or application which is used for demo purposes, automated tests and trainings. + +```bash +docker pull securecodebox/old-joomla +``` + +## What is Old Joomla? + +Insecure & Outdated Joomla Instance: Never expose it to the internet! + +### Source Code + +* + +## Community + +You are welcome, please join us on... 👋 + +- [GitHub][scb-github] +- [Slack][scb-slack] +- [Twitter][scb-twitter] + +secureCodeBox is an official [OWASP][scb-owasp] project. + +## License +[![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://opensource.org/licenses/Apache-2.0) + +As with all Docker images, these likely also contain other software which may be under other licenses (such as Bash, etc from the base distribution, along with any direct or indirect dependencies of the primary software being contained). + +As for any pre-built image usage, it is the image user's responsibility to ensure that any use of this image complies with any relevant licenses for all software contained within. + +[scb-owasp]: https://www.owasp.org/index.php/OWASP_secureCodeBox +[scb-docs]: https://docs.securecodebox.io/ +[scb-site]: https://www.securecodebox.io/ +[scb-github]: https://github.com/secureCodeBox/ +[scb-twitter]: https://twitter.com/secureCodeBox +[scb-slack]: https://join.slack.com/t/securecodebox/shared_invite/enQtNDU3MTUyOTM0NTMwLTBjOWRjNjVkNGEyMjQ0ZGMyNDdlYTQxYWQ4MzNiNGY3MDMxNThkZjJmMzY2NDRhMTk3ZWM3OWFkYmY1YzUxNTU +[scb-license]: https://github.com/secureCodeBox/secureCodeBox/blob/master/LICENSE + From df6600d26a85b8f763b6ac0380dddea5e1634188 Mon Sep 17 00:00:00 2001 From: Robert Seedorff Date: Fri, 1 Oct 2021 11:43:27 +0200 Subject: [PATCH 04/11] Added missing docs folder Signed-off-by: Robert Seedorff --- demo-targets/{old-joomla => old-typo3}/docs/.gitkeep | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename demo-targets/{old-joomla => old-typo3}/docs/.gitkeep (100%) diff --git a/demo-targets/old-joomla/docs/.gitkeep b/demo-targets/old-typo3/docs/.gitkeep similarity index 100% rename from demo-targets/old-joomla/docs/.gitkeep rename to demo-targets/old-typo3/docs/.gitkeep From d6e2d843e37ca6ef2438495329678c9d03758ddb Mon Sep 17 00:00:00 2001 From: Robert Seedorff Date: Fri, 1 Oct 2021 11:45:08 +0200 Subject: [PATCH 05/11] Added CI Build section for some demo-targets Signed-off-by: Robert Seedorff --- .github/workflows/ci.yaml | 62 +++++++++++++++++++++++++++++++++++++-- 1 file changed, 60 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 1c6be4e437..968c76bd1c 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -680,8 +680,66 @@ jobs: password: ${{ secrets.DOCKERHUB_PASSWORD }} repository: ${{ env.DOCKER_NAMESPACE }}/scanner-${{ matrix.scanner }} readme-filepath: ./scanners/${{ matrix.scanner }}/docs/README.DockerHub-Scanner.md - - # ---- Integration Tests ---- + + # ---- Build | Demo-Targets | Custom ---- + + # This Section contains Demo-Targets that are developed by the secureCodeBox project + # The tag for these images will be the Semver of the release + + demo-targets: + name: "Build | Custom Demo-Targets" + runs-on: ubuntu-latest + strategy: + matrix: + target: + - old-joomla + - old-typo3 + - old-wordpress + steps: + - name: Checkout + uses: actions/checkout@v2 + + - name: Docker Meta + id: docker_meta + uses: docker/metadata-action@v3 + with: + images: ${{ env.DOCKER_NAMESPACE }}/${{ matrix.target }} + tags: | + type=sha + type=semver,pattern={{version}} + + - name: Set up Docker Buildx + uses: docker/setup-buildx-action@v1 + + - name: Login to DockerHub + uses: docker/login-action@v1 + with: + username: ${{ secrets.DOCKER_USERNAME }} + password: ${{ secrets.DOCKER_TOKEN }} + + - name: Set baseImageTag to commit hash + run: | + echo "baseImageTag=sha-$(git rev-parse --short HEAD)" >> $GITHUB_ENV + + - name: Build and Push + uses: docker/build-push-action@v2 + with: + context: ./demo-targets/${{ matrix.target }}/container + file: ./demo-targets/${{ matrix.target }}/Dockerfile + platforms: linux/amd64 + push: true + tags: ${{ steps.docker_meta.outputs.tags }} + labels: ${{ steps.docker_meta.outputs.labels }} + + - name: Update Docker Hub Description + uses: peter-evans/dockerhub-description@v2 + with: + username: ${{ secrets.DOCKERHUB_USERNAME }} + password: ${{ secrets.DOCKERHUB_PASSWORD }} + repository: ${{ env.DOCKER_NAMESPACE }}/scanner-${{ matrix.scanner }} + readme-filepath: ./demo-targets/${{ matrix.target }}/docs/README.DockerHub-Target.md + + # ---- Integration Tests ---- Integration-tests: name: Integration Tests | k8s ${{ matrix.k8sVersion }} From 68531f3f855fb950e1fc4af14a5290b7e0b8f7f9 Mon Sep 17 00:00:00 2001 From: rseedorff Date: Fri, 1 Oct 2021 09:45:43 +0000 Subject: [PATCH 06/11] Updating Helm Docs Signed-off-by: GitHub Actions --- .../old-typo3/docs/README.ArtifactHub.md | 113 ++++++++++++++++++ .../old-typo3/docs/README.DockerHub-Target.md | 86 +++++++++++++ 2 files changed, 199 insertions(+) create mode 100644 demo-targets/old-typo3/docs/README.ArtifactHub.md create mode 100644 demo-targets/old-typo3/docs/README.DockerHub-Target.md diff --git a/demo-targets/old-typo3/docs/README.ArtifactHub.md b/demo-targets/old-typo3/docs/README.ArtifactHub.md new file mode 100644 index 0000000000..e1fb6b503a --- /dev/null +++ b/demo-targets/old-typo3/docs/README.ArtifactHub.md @@ -0,0 +1,113 @@ + + + +

+ License Apache-2.0 + GitHub release (latest SemVer) + OWASP Incubator Project + Artifact HUB + GitHub Repo stars + Twitter Follower +

+ +## What is OWASP secureCodeBox? + +

+ secureCodeBox Logo +

+ +_[OWASP secureCodeBox][scb-github]_ is an automated and scalable open source solution that can be used to integrate various *security vulnerability scanners* with a simple and lightweight interface. The _secureCodeBox_ mission is to support *DevSecOps* Teams to make it easy to automate security vulnerability testing in different scenarios. + +With the _secureCodeBox_ we provide a toolchain for continuous scanning of applications to find the low-hanging fruit issues early in the development process and free the resources of the penetration tester to concentrate on the major security issues. + +The secureCodeBox project is running on [Kubernetes](https://kubernetes.io/). To install it you need [Helm](https://helm.sh), a package manager for Kubernetes. It is also possible to start the different integrated security vulnerability scanners based on a docker infrastructure. + +### Quickstart with secureCodeBox on kubernetes + +You can find resources to help you get started on our [documentation website](https://docs.securecodebox.io) including instruction on how to [install the secureCodeBox project](https://docs.securecodebox.io/docs/getting-started/installation) and guides to help you [run your first scans](https://docs.securecodebox.io/docs/getting-started/first-scans) with it. + +## What is Old Typo3? + +Insecure & Outdated Typo3 Instance: Never expose it to the internet! + +### Source Code + +* + +## Deployment +The old-typo3 chart can be deployed via helm: + +```bash +# Install HelmChart (use -n to configure another namespace) +helm upgrade --install old-typo3 secureCodeBox/old-typo3 +``` + +## Values + +| Key | Type | Default | Description | +|-----|------|---------|-------------| +| affinity | object | `{}` | | +| annotations | object | `{}` | add annotations to the deployment, service and pods | +| fullnameOverride | string | `""` | | +| image.pullPolicy | string | `"IfNotPresent"` | | +| image.repository | string | `"docker.io/securecodebox/old-typo3"` | Container Image | +| image.tag | string | defaults to the appVersion | The image tag | +| imagePullSecrets | list | `[]` | | +| ingress.annotations | object | `{}` | | +| ingress.enabled | bool | `false` | | +| ingress.hosts[0].host | string | `"chart-example.local"` | | +| ingress.hosts[0].paths | list | `[]` | | +| ingress.tls | list | `[]` | | +| labels | object | `{}` | add labels to the deployment, service and pods | +| nameOverride | string | `""` | | +| nodeSelector | object | `{}` | | +| podSecurityContext | object | `{}` | | +| replicaCount | int | `1` | | +| resources | object | `{}` | | +| securityContext | object | `{}` | | +| service.port | int | `80` | | +| service.type | string | `"ClusterIP"` | | +| tolerations | list | `[]` | | + +## Contributing + +Contributions are welcome and extremely helpful 🙌 +Please have a look at [Contributing](./CONTRIBUTING.md) + +## Community + +You are welcome, please join us on... 👋 + +- [GitHub][scb-github] +- [Slack][scb-slack] +- [Twitter][scb-twitter] + +secureCodeBox is an official [OWASP][scb-owasp] project. + +## License +[![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://opensource.org/licenses/Apache-2.0) + +Code of secureCodeBox is licensed under the [Apache License 2.0][scb-license]. + +[scb-owasp]: https://www.owasp.org/index.php/OWASP_secureCodeBox +[scb-docs]: https://docs.securecodebox.io/ +[scb-site]: https://www.securecodebox.io/ +[scb-github]: https://github.com/secureCodeBox/ +[scb-twitter]: https://twitter.com/secureCodeBox +[scb-slack]: https://join.slack.com/t/securecodebox/shared_invite/enQtNDU3MTUyOTM0NTMwLTBjOWRjNjVkNGEyMjQ0ZGMyNDdlYTQxYWQ4MzNiNGY3MDMxNThkZjJmMzY2NDRhMTk3ZWM3OWFkYmY1YzUxNTU +[scb-license]: https://github.com/secureCodeBox/secureCodeBox/blob/master/LICENSE + diff --git a/demo-targets/old-typo3/docs/README.DockerHub-Target.md b/demo-targets/old-typo3/docs/README.DockerHub-Target.md new file mode 100644 index 0000000000..0f0d26632b --- /dev/null +++ b/demo-targets/old-typo3/docs/README.DockerHub-Target.md @@ -0,0 +1,86 @@ + + + +

+ License Apache-2.0 + GitHub release (latest SemVer) + OWASP Incubator Project + Artifact HUB + GitHub Repo stars + Twitter Follower +

+ +## What is OWASP secureCodeBox? + +

+ secureCodeBox Logo +

+ +_[OWASP secureCodeBox][scb-github]_ is an automated and scalable open source solution that can be used to integrate various *security vulnerability scanners* with a simple and lightweight interface. The _secureCodeBox_ mission is to support *DevSecOps* Teams to make it easy to automate security vulnerability testing in different scenarios. + +With the _secureCodeBox_ we provide a toolchain for continuous scanning of applications to find the low-hanging fruit issues early in the development process and free the resources of the penetration tester to concentrate on the major security issues. + +The secureCodeBox project is running on [Kubernetes](https://kubernetes.io/). To install it you need [Helm](https://helm.sh), a package manager for Kubernetes. It is also possible to start the different integrated security vulnerability scanners based on a docker infrastructure. + +### Quickstart with secureCodeBox on kubernetes + +You can find resources to help you get started on our [documentation website](https://docs.securecodebox.io) including instruction on how to [install the secureCodeBox project](https://docs.securecodebox.io/docs/getting-started/installation) and guides to help you [run your first scans](https://docs.securecodebox.io/docs/getting-started/first-scans) with it. + +## Supported Tags +- `latest` (represents the latest stable release build) +- tagged releases, e.g. `3.0.0`, `2.9.0`, `2.8.0`, `2.7.0` + +## How to use this image +This image is a potentially vulnerable service or application which is used for demo purposes, automated tests and trainings. + +```bash +docker pull securecodebox/old-typo3 +``` + +## What is Old Typo3? + +Insecure & Outdated Typo3 Instance: Never expose it to the internet! + +### Source Code + +* + +## Community + +You are welcome, please join us on... 👋 + +- [GitHub][scb-github] +- [Slack][scb-slack] +- [Twitter][scb-twitter] + +secureCodeBox is an official [OWASP][scb-owasp] project. + +## License +[![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://opensource.org/licenses/Apache-2.0) + +As with all Docker images, these likely also contain other software which may be under other licenses (such as Bash, etc from the base distribution, along with any direct or indirect dependencies of the primary software being contained). + +As for any pre-built image usage, it is the image user's responsibility to ensure that any use of this image complies with any relevant licenses for all software contained within. + +[scb-owasp]: https://www.owasp.org/index.php/OWASP_secureCodeBox +[scb-docs]: https://docs.securecodebox.io/ +[scb-site]: https://www.securecodebox.io/ +[scb-github]: https://github.com/secureCodeBox/ +[scb-twitter]: https://twitter.com/secureCodeBox +[scb-slack]: https://join.slack.com/t/securecodebox/shared_invite/enQtNDU3MTUyOTM0NTMwLTBjOWRjNjVkNGEyMjQ0ZGMyNDdlYTQxYWQ4MzNiNGY3MDMxNThkZjJmMzY2NDRhMTk3ZWM3OWFkYmY1YzUxNTU +[scb-license]: https://github.com/secureCodeBox/secureCodeBox/blob/master/LICENSE + From 44526f3fd589917fe637a1a9b3c67f079f95d64b Mon Sep 17 00:00:00 2001 From: Robert Seedorff Date: Fri, 1 Oct 2021 11:50:45 +0200 Subject: [PATCH 07/11] Bugfixed wrong path Signed-off-by: Robert Seedorff --- .github/workflows/ci.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 968c76bd1c..05d1c2ba53 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -725,7 +725,7 @@ jobs: uses: docker/build-push-action@v2 with: context: ./demo-targets/${{ matrix.target }}/container - file: ./demo-targets/${{ matrix.target }}/Dockerfile + file: ./demo-targets/${{ matrix.target }}/container/Dockerfile platforms: linux/amd64 push: true tags: ${{ steps.docker_meta.outputs.tags }} From 75b5c4875df6e3ac5d40d56c1d42f6989f97cb40 Mon Sep 17 00:00:00 2001 From: Robert Seedorff Date: Fri, 1 Oct 2021 12:01:34 +0200 Subject: [PATCH 08/11] Bugfixed wrong path Signed-off-by: Robert Seedorff --- .github/workflows/ci.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 05d1c2ba53..25d51a8b20 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -736,7 +736,7 @@ jobs: with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_PASSWORD }} - repository: ${{ env.DOCKER_NAMESPACE }}/scanner-${{ matrix.scanner }} + repository: ${{ env.DOCKER_NAMESPACE }}/${{ matrix.target }} readme-filepath: ./demo-targets/${{ matrix.target }}/docs/README.DockerHub-Target.md # ---- Integration Tests ---- From f18c99c35499875cefd8ac3358737a5475ce68ba Mon Sep 17 00:00:00 2001 From: Robert Seedorff Date: Fri, 1 Oct 2021 12:09:46 +0200 Subject: [PATCH 09/11] Added version tag Signed-off-by: Robert Seedorff --- .github/workflows/ci.yaml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 25d51a8b20..3f424062c8 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -698,6 +698,13 @@ jobs: steps: - name: Checkout uses: actions/checkout@v2 + + - name: Set ENV Var with Demo-Target Version + uses: mikefarah/yq@v4.4.1 + # Notice: The current version of the demo-target is provided via the Chart.yaml to ensure + # there is only one place to edit the version of a scanner + with: + cmd: echo targetVersion=$(yq e .appVersion demo-targets/${{ matrix.scanner }}/Chart.yaml) >> $GITHUB_ENV - name: Docker Meta id: docker_meta @@ -706,7 +713,7 @@ jobs: images: ${{ env.DOCKER_NAMESPACE }}/${{ matrix.target }} tags: | type=sha - type=semver,pattern={{version}} + ${{ env.targetVersion }} - name: Set up Docker Buildx uses: docker/setup-buildx-action@v1 From 65a4c5a98891a81ce4df658798dd4d2f820033f1 Mon Sep 17 00:00:00 2001 From: Robert Seedorff Date: Fri, 1 Oct 2021 12:13:57 +0200 Subject: [PATCH 10/11] Fixed Docker Tag Version Signed-off-by: Robert Seedorff --- .github/workflows/ci.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 3f424062c8..f55e3cdac4 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -704,7 +704,7 @@ jobs: # Notice: The current version of the demo-target is provided via the Chart.yaml to ensure # there is only one place to edit the version of a scanner with: - cmd: echo targetVersion=$(yq e .appVersion demo-targets/${{ matrix.scanner }}/Chart.yaml) >> $GITHUB_ENV + cmd: echo targetVersion=$(yq e .appVersion demo-targets/${{ matrix.target }}/Chart.yaml) >> $GITHUB_ENV - name: Docker Meta id: docker_meta @@ -713,6 +713,7 @@ jobs: images: ${{ env.DOCKER_NAMESPACE }}/${{ matrix.target }} tags: | type=sha + latest ${{ env.targetVersion }} - name: Set up Docker Buildx From 989952409ebab00140362d063ebc90cfe63a2a9c Mon Sep 17 00:00:00 2001 From: Ilyes Ben Dlala Date: Mon, 4 Oct 2021 14:39:06 +0200 Subject: [PATCH 11/11] Remove unnecessary actions in demo-target build Signed-off-by: Ilyes Ben Dlala --- .github/workflows/ci.yaml | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index f55e3cdac4..4b3f78eee2 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -724,11 +724,7 @@ jobs: with: username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_TOKEN }} - - - name: Set baseImageTag to commit hash - run: | - echo "baseImageTag=sha-$(git rev-parse --short HEAD)" >> $GITHUB_ENV - + - name: Build and Push uses: docker/build-push-action@v2 with: