pr3_testing

IaC/kubernetes/docker-socket.yaml

@@ -1,10 +1,5 @@
-# Exposing Docker sockets can lead to compromise of the host systems.
 
 
-#     Kubernetes Documentation - Volumes
-#     Docker Documention - Daemon socket option
-#     MITRE, CWE-284 - Improper Access Control
-
 ---
 apiVersion: v1
 kind: Pod

IaC/terraform/god-mode.tf

@@ -33,6 +33,6 @@ resource "google_project_iam_binding" "example" {
   role    = "roles/owner" # Sensitive
 
   members = [
-    "user:jane@example.com",
+    "user:john@example.com",
   ]
 }

README.md

@@ -1,5 +1,4 @@
-# vulnerable-code-examples
-## Description
+
 This repo contains a variety of code samples of vulnerability, dependency and risk.
 
 ## IaC (Infrastructure as Code)

SAST/java/sample.java

@@ -5,6 +5,3 @@ public static void main(String[] args) {
     }
   }
 
-// (CWE-259)
-// This sample Java file includes code that prints a sensitive password to the console. 
-// It can be used to test SAST tools' capability to detect hardcoded passwords.

SCA/java/maven/pom.xml

@@ -1,5 +1,5 @@
 <!-- File: pom.xml -->
-
+//this file basically does have all the dependecies
 <project xmlns="http://maven.apache.org/POM/4.0.0"
          xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
          xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">