Files
demo 86003f2adc Initial commit: demo app with intentional vulnerabilities
14-stage Jenkins pipeline with real scanners (Semgrep, Gitleaks, Trivy,
SonarQube, Checkov, ZAP, Cosign), Helm chart, DefectDojo integration.
Includes CWE-89, CWE-79, CWE-798, CWE-22, CWE-330 for SAST/secrets demo.
2026-09-02 11:33:11 +00:00

18 lines
332 B
JSON

{
"name": "demo-app",
"version": "1.0.0",
"description": "DevSecOps demo application",
"main": "src/server.js",
"scripts": {
"start": "node src/server.js",
"test": "jest --coverage"
},
"dependencies": {
"express": "4.17.1"
},
"devDependencies": {
"jest": "^29.7.0",
"supertest": "^6.3.3"
}
}