Update pre-commit hooks

Author: DoPaNik

.pre-commit-config.yaml

@@ -1,7 +1,10 @@
 repos:
--   repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v4.5.0
-    hooks:
-    -   id: trailing-whitespace
-    -   id: end-of-file-fixer
-    -   id: check-yaml
+- repo: https://github.com/pre-commit/pre-commit-hooks
+  rev: v4.5.0
+  hooks:
+    - id: trailing-whitespace
+    - id: end-of-file-fixer
+    - id: check-yaml
+      exclude: 2_supplychain/2_praxis/DemoApplication/app/src/main/resources/config/application.yml
+    - id: check-added-large-files
+    - id: detect-private-key

0_devops/1_theorie/Einführung.md

@@ -90,5 +90,3 @@ DevOps ist aus der Erkenntnis entstanden, dass agile Methoden alleine nicht reic
 * [The DevOps Handbook](https://www.goodreads.com/book/show/26083308-the-devops-handbook)
 * [Accelerate – Forsgren et al.](https://www.goodreads.com/book/show/39080433-accelerate)
 * [The Phoenix Project – Kim et al.](https://www.goodreads.com/book/show/17255186-the-phoenix-project)
-
-

0_devops/2_praxis/ContinuousIntegration/Inhalte.md

@@ -13,4 +13,4 @@
 - Install: Führt npm install im Verzeichnis der React-Anwendung aus
 - Lint: Führt npm run lint aus, um Code-Stil und -Qualität zu überprüfen
 - Test: Führt npm test aus, um sicherzustellen, dass Tests erfolgreich durchlaufen
-- Build: Führt npm run build aus, um die React-Anwendung zu erstellen
+- Build: Führt npm run build aus, um die React-Anwendung zu erstellen

1_security/1_theorie/SecurityAutomatisierung.md

@@ -17,7 +17,7 @@
 * Security Tools für die CI-/CD-Pipeline
   ![CICD Tooling](../99_assets/images/CICD_tools.png)
 
-Eine beispielhafte Pipeline mit GitHub Actions ist in diesem [Projekt](https://github.com/andifalk/supply-chain-security) zu finden.  
+Eine beispielhafte Pipeline mit GitHub Actions ist in diesem [Projekt](https://github.com/andifalk/supply-chain-security) zu finden.
 
 * Code Reviews
 
@@ -27,13 +27,13 @@ Eine beispielhafte Pipeline mit GitHub Actions ist in diesem [Projekt](https://g
 * Software Composition Analysis (SCA)
   ![SCA](../99_assets/images/SCA.png)
 
-  
+
 
 ## Security Observability
 
 Um jederzeit auskunftsfähig bezüglich der Sicherheit aller Anwendungen und Umgebungen zu sein werden entsprechende Protokollierungen und ein Monitoring benötigt.
 
-Heute moderne Observability Systeme beinhalten meist ein SIEM (Security Information and Event System).  
+Heute moderne Observability Systeme beinhalten meist ein SIEM (Security Information and Event System).
 Mit diesem werden alle damit verbundenen Logs, Metriken und Ereignisse verknüpft so dass das SIEM mit Hilfe von Künstlicher Intelligenz und Machine Learning automatisiert Angriffspatterns erkennen kann.  Darüber hinaus sind damit dann auch (semi-)automatische Reaktionsmöglichkeiten verbunden.
 
 ![SIEM](../99_assets/images/siem.png)

1_security/1_theorie/SecurityKultur.md

@@ -11,4 +11,4 @@
 - Interne Botschafter: Ausgewählte Mitarbeiter fördern die Security Kultur intern.
 - Experten und Ressourcen: Unterstützen Teams als Sicherheitsexperten und Ressourcen.
 
-![Security Champions](../99_assets/images/security_champions.png)
+![Security Champions](../99_assets/images/security_champions.png)

1_security/1_theorie/ÜbersichtSecInDevOps.md

@@ -11,7 +11,7 @@ Die wesentlichen Teile eines SDLC (SOftware Development Lifecycle) sind in der n
 ![Secure Software Development Lifecycle](../99_assets/images/secure_software_development_lifecycle.png)
 
 
-### Reifegradanalysen 
+### Reifegradanalysen
 
 Mittels [OWASP SAMM (Software Assurance Maturity Model)](https://owaspsamm.org/about/) kann ein vorhandener SDLC messbar bewertet werden inwieweit hier die Sicherheit integriert ist.
 Aus den Ergebnissen können dann konkrete Handlungsempfehlungen zur Verbesserung der Sicherheit für alle Phasen des SDLC abgeleitet und umgesetzt werden.
@@ -43,8 +43,8 @@ Ein Datenflussdiagramm ist aus sehr einfachen Elementen aufgebaut, die in der na
 
 ### Application Security Verification Standard (OWASP)
 
-Mit Hilfe von [ASVS](https://github.com/OWASP/ASVS/tree/v5.0.0/5.0/en) bekommt man einen umfassenden Katalog immer wieder relevanten Anforderungen für Security an die Hand.  
-Je nach erforderlichem Sicherheitslevel sollten die in diesem Guide aufgeführten Anforderungen von typischen Anwendungen erfüllt werden.  
+Mit Hilfe von [ASVS](https://github.com/OWASP/ASVS/tree/v5.0.0/5.0/en) bekommt man einen umfassenden Katalog immer wieder relevanten Anforderungen für Security an die Hand.
+Je nach erforderlichem Sicherheitslevel sollten die in diesem Guide aufgeführten Anforderungen von typischen Anwendungen erfüllt werden.
 
 Die meisten aufgeführten Anforderungen können durch automatisierte Tests anhand der aufgeführten Akzeptanzkriterien abgedeckt werden.
 
@@ -86,4 +86,4 @@ Inzwischen ist ASVS in Version 5.0 angelangt. Hier wurden insbesondere neue Anfo
 
 * [OWASP Websecurity Testing Guide](https://owasp.org/www-project-web-security-testing-guide)
 
-* [OWASP Security-C4PO Anwendung](https://owasp.org/www-project-security-c4po/)
+* [OWASP Security-C4PO Anwendung](https://owasp.org/www-project-security-c4po/)

1_security/2_praxis/README.md

@@ -1,7 +1,7 @@
 # Security Demos
 
 
-- [Secure Single Page Applications](https://github.com/andifalk/secure-spa)  
-- [Bookmark Service Application](https://github.com/andifalk/bookmark-service)  
-- [API Security](https://github.com/andifalk/api-security)  
-- [Supply Chain Security](https://github.com/andifalk/supply-chain-security)
+- [Secure Single Page Applications](https://github.com/andifalk/secure-spa)
+- [Bookmark Service Application](https://github.com/andifalk/bookmark-service)
+- [API Security](https://github.com/andifalk/api-security)
+- [Supply Chain Security](https://github.com/andifalk/supply-chain-security)

1_security/2_praxis/security-testing-demos/README.md

@@ -38,7 +38,7 @@ The security tests include the following types:
   * Security Architecture Tests (using [ArchUnit](https://www.archunit.org/))
   * Input Validation Tests
   * Broken Authentication Tests
-* Integration Test Layer    
+* Integration Test Layer
   * Security Misconfiguration Tests
   * Injection (SQL Injection) Tests
   * Broken Access Control Tests
@@ -54,7 +54,7 @@ To check the project with the OSS semgrep scanner just perform this command insi
 ```shell
 semgrep scan --config auto
 ```
-  
+
 #### SonarQube
 
 To use SonarQube for security analysis the easiest way is the provided docker container.
@@ -63,11 +63,10 @@ Just follow the [Getting Started Guide](https://docs.sonarqube.org/latest/setup/
 After you have configured the project in SonarQube you can trigger the project analysis by issuing the following command:
 
 ```
-./mvnw sonar:sonar -Dsonar.projectKey=PROJECT_KEY 
-                             -Dsonar.projectName='PROJECT_NAME' 
-                             -Dsonar.host.url=http://localhost:8085 
-                             -Dsonar.token=THE_GENERATED_TOKEN  
+./mvnw sonar:sonar -Dsonar.projectKey=PROJECT_KEY
+                             -Dsonar.projectName='PROJECT_NAME'
+                             -Dsonar.host.url=http://localhost:8085
+                             -Dsonar.token=THE_GENERATED_TOKEN
 ```
 
 Please replace _PROJECT_KEY_ and _PROJECT_TOKEN_ with your own values.
-

1_security/2_praxis/security-testing-demos/analyze_sonar.sh

@@ -1,4 +1,4 @@
 ./mvnw sonar:sonar -Dsonar.projectKey=bookmarks \
                              -Dsonar.projectName='Bookmarks' \
                              -Dsonar.host.url=http://localhost:8085 \
-                             -Dsonar.token=sqa_c23fdc9cbb471e837ef2b0ce50e060466379ee6b
+                             -Dsonar.token=sqa_c23fdc9cbb471e837ef2b0ce50e060466379ee6b

1_security/2_praxis/security-testing-demos/api-docs.json

@@ -1 +1 @@
-{"openapi":"3.0.1","info":{"title":"Bookmark-API","version":"1"},"servers":[{"url":"http://localhost:9090","description":"Generated server url"}],"security":[{"basicAuth":[]}],"paths":{"/api/users":{"get":{"tags":["User-API"],"summary":"Retrieves list of users","operationId":"findAllUsers","responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/User"}}}}}}},"post":{"tags":["User-API"],"summary":"Register new user","operationId":"registerUser","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/User"}}},"required":true},"responses":{"201":{"description":"Created","content":{"*/*":{"schema":{"$ref":"#/components/schemas/User"}}}}}}},"/api/users/{userid}/changepassword":{"post":{"tags":["User-API"],"summary":"Change current password of user","operationId":"changePassword","parameters":[{"name":"userid","in":"path","required":true,"schema":{"type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ChangePasswordRequest"}}},"required":true},"responses":{"200":{"description":"OK"}}}},"/api/bookmarks":{"get":{"tags":["Bookmark-API"],"summary":"Retrieves list of bookmarks for given user","operationId":"findAllBookmarks","parameters":[{"name":"userid","in":"query","description":"The identifier of the user","required":true,"schema":{"type":"string"},"example":"c9caa4d1-5ad7-4dd1-8bd1-91b8bc5b9a48"}],"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Bookmark"}}}}}}},"post":{"tags":["Bookmark-API"],"summary":"Creates a new bookmark for given user","operationId":"createBookmark","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Bookmark"}}},"required":true},"responses":{"201":{"description":"Created","content":{"*/*":{"schema":{"$ref":"#/components/schemas/Bookmark"}}}}}}},"/api/bookmarks/upload":{"post":{"tags":["Bookmark-API"],"summary":"Uploads bookmarks inside an excel sheet","operationId":"uploadBookmarks","requestBody":{"content":{"application/json":{"schema":{"required":["file"],"type":"object","properties":{"file":{"type":"string","format":"binary"}}}}}},"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Bookmark"}}}}}}}},"/api/users/{userid}":{"get":{"tags":["User-API"],"summary":"Get user specified by identifier","operationId":"getUser","parameters":[{"name":"userid","in":"path","required":true,"schema":{"type":"string"}}],"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/User"}}}}}},"delete":{"tags":["User-API"],"summary":"Delete user specified by identifier","operationId":"deleteUser","parameters":[{"name":"userid","in":"path","required":true,"schema":{"type":"string"}}],"responses":{"204":{"description":"No Content"}}}},"/api/users/me":{"get":{"tags":["User-API"],"summary":"Get current authenticated user","operationId":"currentUser","responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/User"}}}}}}},"/api/bookmarks/search":{"get":{"tags":["Bookmark-API"],"summary":"Searches bookmarks by name","operationId":"searchBookmarks","parameters":[{"name":"name","in":"query","description":"The name of the bookmarks to be searched for","required":true,"schema":{"type":"string"},"example":"Ama"}],"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Bookmark"}}}}}}}},"/api/bookmarks/{bookmarkId}":{"delete":{"tags":["Bookmark-API"],"summary":"Deletes an existing bookmark by its identifier","operationId":"deleteBookmark","parameters":[{"name":"bookmarkId","in":"path","required":true,"schema":{"type":"string"}}],"responses":{"204":{"description":"No Content"}}}}},"components":{"schemas":{"User":{"type":"object","properties":{"identifier":{"type":"string"},"firstName":{"type":"string"},"lastName":{"type":"string"},"password":{"type":"string"},"email":{"type":"string"},"roles":{"type":"array","items":{"type":"string"}},"enabled":{"type":"boolean"},"accountNonExpired":{"type":"boolean"},"accountNonLocked":{"type":"boolean"},"credentialsNonExpired":{"type":"boolean"},"username":{"type":"string"}}},"ChangePasswordRequest":{"type":"object","properties":{"oldPassword":{"type":"string"},"newPassword":{"type":"string"}}},"Bookmark":{"type":"object","properties":{"identifier":{"type":"string"},"name":{"type":"string"},"description":{"type":"string"},"category":{"type":"string"},"url":{"type":"string"},"userIdentifier":{"type":"string"}}}},"securitySchemes":{"basicAuth":{"type":"http","scheme":"basic"}}}}
+{"openapi":"3.0.1","info":{"title":"Bookmark-API","version":"1"},"servers":[{"url":"http://localhost:9090","description":"Generated server url"}],"security":[{"basicAuth":[]}],"paths":{"/api/users":{"get":{"tags":["User-API"],"summary":"Retrieves list of users","operationId":"findAllUsers","responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/User"}}}}}}},"post":{"tags":["User-API"],"summary":"Register new user","operationId":"registerUser","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/User"}}},"required":true},"responses":{"201":{"description":"Created","content":{"*/*":{"schema":{"$ref":"#/components/schemas/User"}}}}}}},"/api/users/{userid}/changepassword":{"post":{"tags":["User-API"],"summary":"Change current password of user","operationId":"changePassword","parameters":[{"name":"userid","in":"path","required":true,"schema":{"type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ChangePasswordRequest"}}},"required":true},"responses":{"200":{"description":"OK"}}}},"/api/bookmarks":{"get":{"tags":["Bookmark-API"],"summary":"Retrieves list of bookmarks for given user","operationId":"findAllBookmarks","parameters":[{"name":"userid","in":"query","description":"The identifier of the user","required":true,"schema":{"type":"string"},"example":"c9caa4d1-5ad7-4dd1-8bd1-91b8bc5b9a48"}],"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Bookmark"}}}}}}},"post":{"tags":["Bookmark-API"],"summary":"Creates a new bookmark for given user","operationId":"createBookmark","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/Bookmark"}}},"required":true},"responses":{"201":{"description":"Created","content":{"*/*":{"schema":{"$ref":"#/components/schemas/Bookmark"}}}}}}},"/api/bookmarks/upload":{"post":{"tags":["Bookmark-API"],"summary":"Uploads bookmarks inside an excel sheet","operationId":"uploadBookmarks","requestBody":{"content":{"application/json":{"schema":{"required":["file"],"type":"object","properties":{"file":{"type":"string","format":"binary"}}}}}},"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Bookmark"}}}}}}}},"/api/users/{userid}":{"get":{"tags":["User-API"],"summary":"Get user specified by identifier","operationId":"getUser","parameters":[{"name":"userid","in":"path","required":true,"schema":{"type":"string"}}],"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/User"}}}}}},"delete":{"tags":["User-API"],"summary":"Delete user specified by identifier","operationId":"deleteUser","parameters":[{"name":"userid","in":"path","required":true,"schema":{"type":"string"}}],"responses":{"204":{"description":"No Content"}}}},"/api/users/me":{"get":{"tags":["User-API"],"summary":"Get current authenticated user","operationId":"currentUser","responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/User"}}}}}}},"/api/bookmarks/search":{"get":{"tags":["Bookmark-API"],"summary":"Searches bookmarks by name","operationId":"searchBookmarks","parameters":[{"name":"name","in":"query","description":"The name of the bookmarks to be searched for","required":true,"schema":{"type":"string"},"example":"Ama"}],"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"type":"array","items":{"$ref":"#/components/schemas/Bookmark"}}}}}}}},"/api/bookmarks/{bookmarkId}":{"delete":{"tags":["Bookmark-API"],"summary":"Deletes an existing bookmark by its identifier","operationId":"deleteBookmark","parameters":[{"name":"bookmarkId","in":"path","required":true,"schema":{"type":"string"}}],"responses":{"204":{"description":"No Content"}}}}},"components":{"schemas":{"User":{"type":"object","properties":{"identifier":{"type":"string"},"firstName":{"type":"string"},"lastName":{"type":"string"},"password":{"type":"string"},"email":{"type":"string"},"roles":{"type":"array","items":{"type":"string"}},"enabled":{"type":"boolean"},"accountNonExpired":{"type":"boolean"},"accountNonLocked":{"type":"boolean"},"credentialsNonExpired":{"type":"boolean"},"username":{"type":"string"}}},"ChangePasswordRequest":{"type":"object","properties":{"oldPassword":{"type":"string"},"newPassword":{"type":"string"}}},"Bookmark":{"type":"object","properties":{"identifier":{"type":"string"},"name":{"type":"string"},"description":{"type":"string"},"category":{"type":"string"},"url":{"type":"string"},"userIdentifier":{"type":"string"}}}},"securitySchemes":{"basicAuth":{"type":"http","scheme":"basic"}}}}