Codegoatlocal

README.md

@@ -1,2 +1,3 @@
 # codegoat
 Sample repo of errors, misconfigurations, and vulnerabilities for Bridgecrew and Prisma Cloud Code Security
+new change

newfile.tf

@@ -0,0 +1,31 @@
+resource "aws_ecs_task_definition" "service" {
+  family = "service"
+  container_definitions = jsonencode([
+    {
+      name      = "first"
+      image     = "nginx"
+      cpu       = 10
+      memory    = 512
+      essential = true
+      portMappings = [
+        {
+          containerPort = 80
+          hostPort      = 80
+        }
+      ]
+    },
+    {
+      name      = "second"
+      image     = "python:3.9-alpine"
+      cpu       = 10
+      memory    = 256
+      essential = true
+      portMappings = [
+        {
+          containerPort = 443
+          hostPort      = 443
+        }
+      ]
+    }
+  ])
+}

sca-image/Dockerfile

@@ -4,5 +4,5 @@ RUN groupadd -r johnnycodev && useradd -r -s /bin/false -g johnnycodev johnnycod
 WORKDIR /app
 COPY . /app
 RUN chown -R johnnycodev:johnnycodev /app
-USER johnnycodev
-CMD node index.js
+USER johnnycodevsasdf
+CMD node index.js

sca-package/requirements.txt

@@ -1,3 +1,3 @@
 django==1.2
-flask==0.6
+flask==0.12.3
 requests==2.26.0

secrets/app.js

@@ -1,3 +1,4 @@
 const SEC_1 = "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"
+const SEC_3 = "dsapi45202d12abdce73c004a9e0be24a21b2"
 const SEC_2 = "eyJrIjoiNUwyZU7TMmRxQXNVcnR7UXB0ME4zYkhRaTk2STVhR0MiLCJuIjoidGVtcCIsImlkIjoxfQ=="
-const SEC_3 = "dsapi45202d12abdce73c004a9e0be24a21b2"
+const SEC_3 = "dsapi45202d12abdce73c004a9e0be24a21b2"

terraform/README

@@ -0,0 +1 @@
+new readme change

terraform/ecs.tf

@@ -29,3 +29,4 @@ resource "aws_ecs_task_definition" "service" {
     }
   ])
 }
+`

terraform/main.tf

@@ -69,4 +69,5 @@ module "instance" {
 resource "aws_ebs_volume" "i" {
   availability_zone = "${var.region}a"
   size              = 40
+  encrypted = true
 }

terraform/s3.tf

@@ -0,0 +1,33 @@
+resource "aws_ecs_task_definition" "service" {
+  family = "service"
+  container_definitions = jsonencode([
+    {
+      name      = "first"
+      image     = "nginx"
+      cpu       = 10
+      memory    = 512
+      essential = true
+      portMappings = [
+        {
+          containerPort = 80
+          hostPort      = 80
+        }
+      ]
+    },
+    {
+      name      = "second"
+      image     = "python:3.9-alpine"
+      cpu       = 10
+      memory    = 256
+      essential = true
+      portMappings = [
+        {
+          containerPort = 443
+          hostPort      = 443
+        }
+      ]
+    }
+  ])
+}
+`
+