You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
By downloading and using the docker images, the tools needed are already included in the containers
20
-
21
-
### Using the docker images for Goof
22
-
- go to the "goof" directory in (unpacked) zip file
23
-
24
-
Import docker images
25
-
```
26
-
$ docker load -i snyk-demo-todo_goof.tar
27
-
$ docker load -i mongo.tar
28
-
```
29
-
Start application
30
-
```
31
-
$ docker-compose up
32
-
```
33
-
navigate to [http://localhost:3001](http://localhost:3001)
34
-
35
-
To access the shell
36
-
```
37
-
$ docker exec -it goof bash
38
-
```
39
-
40
-
### Using the docker images for Java Goof
41
-
- go to the "java_goof_docker" directory in (unpacked) zip file
42
-
43
-
Import docker images
44
-
```
45
-
$ docker load -i javagoof.tar
46
-
```
47
-
Start application
48
-
```
49
-
$ docker-compose up
50
-
```
51
-
navigate to [http://localhost:8080](http://localhost:8080)
52
-
53
-
To access the shell
54
-
```
55
-
$ docker exec -it javagoof bash
56
-
```
11
+
* Install everything on your [local machine](install/manual.md)
57
12
58
13
59
14
# An introduction to this workshop
@@ -72,27 +27,11 @@ For each vulnerability section in this workshop, you’ll be given information a
72
27
73
28
# Goof installation
74
29
75
-
In a terminal, start mongod, using the following command:
76
-
77
-
```
78
-
$ mongod &
79
-
```
80
-
81
-
Next you’ll need to fork the goof repository, clone it and build your application. The application can be found on GitHub here: [https://github.com/snyk/goof](https://github.com/snyk/goof).
82
-
83
-
Fork this application to your local repository so that any remediation you choose to perform will only happen on your repository and won’t affect others in this workshop.
84
-
85
-
Clone the repository onto your local file system and navigate into the project’s root directory. Run the following commands to download the dependencies for the goof application:
30
+
Depending on your choice before pick the appropriate install manual
31
+
* using [Docker Images](install/goof_docker.md)
32
+
* install on [Local machine](install/goof_local.md)
86
33
87
-
```
88
-
$ npm install
89
-
```
90
34
91
-
Your application should be ready to run. You can start the application by running the following command from within the main project directory:
92
-
93
-
```
94
-
$ npm start
95
-
```
96
35
97
36
From your browser of choice, navigate to [http://localhost:3001](http://localhost:3001) and you should see the following page.
98
37
@@ -105,7 +44,10 @@ Take a few minutes playing with the site, and in particular, create a few todo i
105
44
106
45
## Scan your application
107
46
108
-
First of all, let's look at it from the blue (defensive) side. We need to scan our application to understand the direct and indirect dependencies that exist in the application, as well as the vulnerabilities in each library. To do this, navigate to [https://snyk.io](https://snyk.io) and click "Sign up" or "Log in" (if you're already a user), on the top right of the site:
47
+
First of all, let's look at it from the blue (defensive) side.
48
+
Fork the goof application to your own github account. The application can be found on GitHub here: [https://github.com/snyk/goof](https://github.com/snyk/goof).
49
+
We need to scan our application to understand the direct and indirect dependencies that exist in the application, as well as the vulnerabilities in each library. To do this, navigate to [https://snyk.io](https://snyk.io) and click "Sign up" or "Log in" (if you're already a user), on the top right of the site:
50
+
109
51
110
52
111
53
@@ -187,6 +129,8 @@ Make sure your new PR tests do not introduce any new security or licence issue h
187
129
188
130
When you're happy with the PR, merge the changes.
189
131
132
+
#### Local machine install only (This will not work when you are using the Docker images)
133
+
190
134
If you're running the application locally stop it by hitting ```Ctrl+C``` in the window you ran ```npm start```. Get the latest code from GitHub by running ```git fetch```. Download the new version of ```st``` by running ```npm install``` and then start your application again, using ```npm start```.
191
135
192
136
Try your hacks again. *Congratulations!*, you’ve remediated the vulnerability and should now be redirected to the homepage each time you try to break free of the public folder.
@@ -274,25 +218,10 @@ After updating your application, try your hacks again. Congratulations, you’ve
274
218
275
219
# Java Goof Installation
276
220
277
-
To start with, you’ll need to clone the java-goof repository, and build your application. The application can be found on GitHub here: [https://github.com/snyk/java-goof](https://github.com/snyk/java-goof).
278
-
279
-
Clone the repository onto your local file system
221
+
Depending on your choice before pick the appropriate install manual
222
+
* using [Docker Images](install/javagoof_docker.md)
223
+
* install on [Local machine](install/javagoof_local.md)
Open a terminal and run the following command from the root directory:
286
-
287
-
```
288
-
$ mvn install
289
-
```
290
-
291
-
Navigate into the ```todolist-web-struts``` directory and run the following to start the server:
292
-
293
-
```
294
-
$ mvn tomcat7:run
295
-
```
296
225
297
226
From a browser navigate to the following URL: [http://localhost:8080/](http://localhost:8080/)
298
227
@@ -312,8 +241,9 @@ When signed in, you’ll see a number of todo entries. If you click about at the
312
241
## Scan your application
313
242
314
243
Back on the blue (defensive) team, now. We need to scan our application to understand the direct and indirect dependencies that exist in the application, as well as the vulnerabilities in each library.
244
+
Fork Java Goof to your own github account. The application can be found on GitHub here: [https://github.com/snyk/java-goof](https://github.com/snyk/java-goof)
315
245
316
-
If you've already got a Snyk account from earlier in the workshop, you just need to add the Java Goof repository you cloned earlier into the Snyk dashboard. If you haven't done so, create your account as follows:
246
+
If you've already got a Snyk account from earlier in the workshop, you just need to add the Java Goof repository into the Snyk dashboard. If you haven't done so, create your account as follows:
317
247
318
248
Navigate to [https://snyk.io](https://snyk.io) if you haven't done so already, click "Log in" or "Sign up" on the top right of the site.
In a terminal, start mongod, using the following command:
4
+
5
+
```
6
+
$ mongod &
7
+
```
8
+
9
+
Next you’ll need to fork the goof repository, clone it and build your application. The application can be found on GitHub here: [https://github.com/snyk/goof](https://github.com/snyk/goof).
10
+
11
+
Fork this application to your local repository so that any remediation you choose to perform will only happen on your repository and won’t affect others in this workshop.
12
+
13
+
Clone the repository onto your local file system and navigate into the project’s root directory. Run the following commands to download the dependencies for the goof application:
14
+
15
+
```
16
+
$ npm install
17
+
```
18
+
19
+
Your application should be ready to run. You can start the application by running the following command from within the main project directory:
20
+
21
+
```
22
+
$ npm start
23
+
```
24
+
25
+
From your browser of choice, navigate to [http://localhost:3001](http://localhost:3001) and you should see the following page.
To start with, you’ll need to clone the java-goof repository, and build your application. The application can be found on GitHub here: [https://github.com/snyk/java-goof](https://github.com/snyk/java-goof).
0 commit comments