Initial commit - Integrasi Trivy ke GitHub

Author: kimookoii

.gitattributes

@@ -0,0 +1 @@
+*.tar filter=lfs diff=lfs merge=lfs -text

Dockerfile

@@ -0,0 +1,8 @@
+FROM python:3.12-slim
+WORKDIR /app
+COPY . /app
+RUN pip install --no-cache-dir flask==2.3.2
+RUN adduser --disabled-password appuser
+USER appuser
+EXPOSE 5000
+CMD ["python", "app.py"]

app.py

@@ -0,0 +1,7 @@
+from flask import Flask
+app = Flask(__name__)
+@app.route("/")
+def home():
+ return "Hello DevSecOps"
+if __name__ == "__main__":
+ app.run(host="0.0.0.0", port=5000)

insecure-app.tar

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:a052bee955f8a2f1a03edec55d5e7e4045ea0418984bc099191e2fbc7c8c703d
+size 378034176

secure-app.tar

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b71947aee5723ebcbe32c079f19a7fa2f4f0dcd56bdf0f73939877973c089498
+size 427479552