diff --git a/IaC/kubernetes/docker-socket.yaml b/IaC/kubernetes/docker-socket.yaml index f5b2c51..a5036f8 100644 --- a/IaC/kubernetes/docker-socket.yaml +++ b/IaC/kubernetes/docker-socket.yaml @@ -1,10 +1,5 @@ -# Exposing Docker sockets can lead to compromise of the host systems. -# Kubernetes Documentation - Volumes -# Docker Documention - Daemon socket option -# MITRE, CWE-284 - Improper Access Control - --- apiVersion: v1 kind: Pod diff --git a/IaC/terraform/god-mode.tf b/IaC/terraform/god-mode.tf index f78bda5..185d181 100644 --- a/IaC/terraform/god-mode.tf +++ b/IaC/terraform/god-mode.tf @@ -33,6 +33,6 @@ resource "google_project_iam_binding" "example" { role = "roles/owner" # Sensitive members = [ - "user:jane@example.com", + "user:john@example.com", ] } diff --git a/README.md b/README.md index f59f4b7..8507610 100644 --- a/README.md +++ b/README.md @@ -1,5 +1,4 @@ -# vulnerable-code-examples -## Description + This repo contains a variety of code samples of vulnerability, dependency and risk. ## IaC (Infrastructure as Code) diff --git a/SAST/java/sample.java b/SAST/java/sample.java index 2243308..19b4522 100644 --- a/SAST/java/sample.java +++ b/SAST/java/sample.java @@ -5,6 +5,3 @@ public static void main(String[] args) { } } -// (CWE-259) -// This sample Java file includes code that prints a sensitive password to the console. -// It can be used to test SAST tools' capability to detect hardcoded passwords. \ No newline at end of file diff --git a/SCA/java/maven/pom.xml b/SCA/java/maven/pom.xml index 703cd47..aa156b4 100644 --- a/SCA/java/maven/pom.xml +++ b/SCA/java/maven/pom.xml @@ -1,5 +1,5 @@ - +//this file basically does have all the dependecies