6 Commits
Author SHA1 Message Date
Jenkins CI ce7bdcce16 ci: deploy build 4 [ci skip] 2026-09-02 12:02:37 +00:00
demo fa5816a460 fix: run uploader container as uid 1000 (workspace write access) 2026-09-02 11:59:51 +00:00
Jenkins CI 285d99480a ci: deploy build 3 [ci skip] 2026-09-02 11:53:03 +00:00
demo 695baaf5e8 fix: pin cosign to v2.4.1 (v3 removed --tlog-upload flag) 2026-09-02 11:50:07 +00:00
demo 86003f2adc Initial commit: demo app with intentional vulnerabilities
14-stage Jenkins pipeline with real scanners (Semgrep, Gitleaks, Trivy,
SonarQube, Checkov, ZAP, Cosign), Helm chart, DefectDojo integration.
Includes CWE-89, CWE-79, CWE-798, CWE-22, CWE-330 for SAST/secrets demo.
2026-09-02 11:33:11 +00:00
demo 7fd500b47f Initial commit 2026-09-02 11:33:10 +00:00