cap07-12-boas-praticas-na-correcao-das-vulnerabilidades

Author: argentinaluiz

src/scout/Dockerfile

@@ -0,0 +1,74 @@
+FROM node:24.8.0-slim AS ci
+
+# baseado no quanto as instruções podem mudar
+# instruções que não mudam ou pouco mudam devem ficar no topo
+# ENV, ARG, RUN apt update, apt install
+
+RUN apt update && apt install -y \
+    git \
+    curl && \
+    rm -rf /var/lib/apt/lists/*
+
+# deterministicas e não deterministicas
+
+#RUN echo "hello world" > test.txt
+
+# ARG BUILD_TIMESTAMP
+# RUN echo "$BUILD_TIMESTAMP" > /build_time.txt
+
+# add vs copy
+
+#ADD --checksum=sha256:278888 http://ftp.de.debian.org/debian/pool/main/c/curl/curl_7.88.1-10+deb12u12_amd64.deb /tmp/curl.deb
+# RUN script.sh
+# gzip, bzip2 or xz
+ADD curl-8.15.0.tar.gz /tmp/test
+
+
+USER node
+
+RUN mkdir /home/node/app
+
+WORKDIR /home/node/app
+
+RUN --mount=type=bind,source=package.json,target=package.json \
+    --mount=type=bind,source=package-lock.json,target=package-lock.json \
+    --mount=type=cache,target=/home/node/.npm,uid=1000,gid=1000,id=npm-cache \
+    npm ci
+
+COPY --chown=node:node . .
+
+CMD [ "tail", "-f", "/dev/null" ]
+
+FROM node:24.8.0-slim AS builder
+
+ENV NODE_ENV=production
+
+USER node
+
+RUN mkdir /home/node/app
+
+WORKDIR /home/node/app
+
+COPY --from=ci --chown=node:node /home/node/app .
+RUN npm run build
+
+RUN --mount=type=cache,target=/home/node/.npm,uid=1000,gid=1000,id=npm-cache \
+    npm ci --only=production
+
+FROM node:24.8.0-slim AS production
+
+ENV NODE_ENV=production
+
+USER node
+
+RUN mkdir /home/node/app
+
+WORKDIR /home/node/app
+
+COPY --chown=node:node --from=builder /home/node/app/dist ./dist
+COPY --chown=node:node --from=builder /home/node/app/node_modules ./node_modules
+COPY --chown=node:node --from=builder /home/node/app/package.json ./
+
+EXPOSE 3000
+
+CMD [ "node", "dist/main.js" ]

src/scout/docker-bake.hcl

@@ -0,0 +1,16 @@
+group "default" {
+    targets = [ "nestjs-prod" ]
+}
+
+target "nestjs-prod" {
+    context = "./nestjs-project-insecure"
+    dockerfile = "../Dockerfile"
+    tags = ["nestjs:latest"]
+}
+
+target "nestjs-ci"  {
+  context = "./nestjs-project-insecure"
+  dockerfile = "../Dockerfile"
+  tags = ["nestjs:ci"]
+  target = "ci"
+}

src/scout/nestjs-project-insecure/.dockerignore

@@ -0,0 +1 @@
+node_modules/

src/scout/nestjs-project-insecure/.eslintrc.js

@@ -0,0 +1,25 @@
+module.exports = {
+  parser: '@typescript-eslint/parser',
+  parserOptions: {
+    project: 'tsconfig.json',
+    tsconfigRootDir : __dirname, 
+    sourceType: 'module',
+  },
+  plugins: ['@typescript-eslint/eslint-plugin'],
+  extends: [
+    'plugin:@typescript-eslint/recommended',
+    'plugin:prettier/recommended',
+  ],
+  root: true,
+  env: {
+    node: true,
+    jest: true,
+  },
+  ignorePatterns: ['.eslintrc.js'],
+  rules: {
+    '@typescript-eslint/interface-name-prefix': 'off',
+    '@typescript-eslint/explicit-function-return-type': 'off',
+    '@typescript-eslint/explicit-module-boundary-types': 'off',
+    '@typescript-eslint/no-explicit-any': 'off',
+  },
+};

src/scout/nestjs-project-insecure/.gitignore

@@ -0,0 +1,37 @@
+# compiled output
+/dist
+/node_modules
+
+# Logs
+logs
+*.log
+npm-debug.log*
+pnpm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+lerna-debug.log*
+
+# OS
+.DS_Store
+
+# Tests
+/coverage
+/.nyc_output
+
+# IDEs and editors
+/.idea
+.project
+.classpath
+.c9/
+*.launch
+.settings/
+*.sublime-workspace
+
+# IDE - VSCode
+.vscode/*
+!.vscode/settings.json
+!.vscode/tasks.json
+!.vscode/launch.json
+!.vscode/extensions.json
+
+.history/

src/scout/nestjs-project-insecure/.prettierrc

@@ -0,0 +1,4 @@
+{
+  "singleQuote": true,
+  "trailingComma": "all"
+}

src/scout/nestjs-project-insecure/Nest.js - Arquitetura da aplicação@1.25x.png

@@ -0,0 +1,17 @@
+![Imersão Full Stack && Full Cycle](https://events-fullcycle.s3.amazonaws.com/events-fullcycle/static/site/img/grupo_4417.png)
+
+Participe gratuitamente: https://imersao.fullcycle.com.br/
+
+## Sobre o repositório
+Esse repositório contém o código-fonte ministrado na aula Nest.js com Domain Driven Design (DDD): [https://www.youtube.com/watch?v=XTmvAj5OSQI](https://www.youtube.com/watch?v=XTmvAj5OSQI)
+
+## Rodar a aplicação
+
+Execute os comandos:
+
+```bash
+npm install
+npm run start:dev
+```
+
+Acesse http://localhost:3000/bank-accounts ou use o arquivo `api.http` para testar a API usando a extensão Rest Client do VSCode ou outra ferramenta para brincar com o HTTP.

src/scout/nestjs-project-insecure/README.md

@@ -0,0 +1,33 @@
+GET http://localhost:3000/bank-accounts
+
+###
+GET http://localhost:3000/bank-accounts/ce669d21-4fa4-47bb-8918-e657b809910a
+
+###
+POST http://localhost:3000/bank-accounts
+Content-Type: application/json
+
+{
+    "account_number": "5555-55"
+}
+
+###
+PATCH http://localhost:3000/bank-accounts/123
+Content-Type: application/json
+
+{
+    "account_number": 1234
+}
+
+###
+DELETE http://localhost:3000/bank-accounts/123
+
+###
+POST http://localhost:3000/bank-accounts/transfer
+Content-Type: application/json
+
+{
+    "from": "4444-44",
+    "to": "5555-55",
+    "amount": 100
+}