14-stage Jenkins pipeline with real scanners (Semgrep, Gitleaks, Trivy, SonarQube, Checkov, ZAP, Cosign), Helm chart, DefectDojo integration. Includes CWE-89, CWE-79, CWE-798, CWE-22, CWE-330 for SAST/secrets demo.
18 lines
332 B
JSON
18 lines
332 B
JSON
{
|
|
"name": "demo-app",
|
|
"version": "1.0.0",
|
|
"description": "DevSecOps demo application",
|
|
"main": "src/server.js",
|
|
"scripts": {
|
|
"start": "node src/server.js",
|
|
"test": "jest --coverage"
|
|
},
|
|
"dependencies": {
|
|
"express": "4.17.1"
|
|
},
|
|
"devDependencies": {
|
|
"jest": "^29.7.0",
|
|
"supertest": "^6.3.3"
|
|
}
|
|
}
|