euloong/sample-flask-app

Example vulnerable app for the AppSec101 workshop deployed by https://github.com/wilvk/sample-deploy-pipeline

sample-flask-application

This application is intended for use with the sample-deploy-pipeline Jenkins application located here.

The application consists of two docker containers:

• A frontend website written in Python Flask
• A backend database using PostgreSQL

It is a simple message-posting application where messages entered by the user in the web interface are written to the PostgreSQL database. The web front-end shows all messages entered by users.

Warning: this repository deliberately contains vulnerabilities, do not use the code from this repo in production.

Instructions

• 0. Setup
• 1. Hawkeye
• 2. Secret Scanning
• 3. CI/CD